diff --git a/bootanim.te b/bootanim.te index 024d20cba50960b4f3b907244d17472b2a91870a..3a0a76f0f737666b251a185def0c40cbd0f7e15e 100644 --- a/bootanim.te +++ b/bootanim.te @@ -8,3 +8,6 @@ binder_use(bootanim) binder_call(bootanim, surfaceflinger) allow bootanim gpu_device:chr_file rw_file_perms; + +# /oem access +allow bootanim oemfs:dir search; diff --git a/system_server.te b/system_server.te index 3b331605227e1999c7f9295e03e236e3b84e43f8..d7453ad2f516abea5002559d93d26e8933d3d659 100644 --- a/system_server.te +++ b/system_server.te @@ -388,6 +388,9 @@ allow system_server block_device:dir search; # Clean up old cgroups allow system_server cgroup:dir { remove_name rmdir }; +# /oem access +allow system_server oemfs:dir search; + ### ### Neverallow rules ###