commit 41b2b4325ea3e8fe36272c2be20bdfeaca5a1876
author Treehugger Robot <treehugger-gerrit@google.com> Fri Feb 10 01:35:35 2017 +0000
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Fri Feb 10 01:35:36 2017 +0000
tree 220e2e9913f9e9b27028f2fc2aaf4eb14e6c640a
parent 8b63356bd383026d7e179e4398080a6e3448e73f
parent 084faf025903795fe223a31d7e626d0439b459c2

Merge "Add policies for new services."

public/init.te

diff --git a/public/init.te b/public/init.te
index fe8cdbb..4d64aad 100644
--- a/public/init.te
+++ b/public/init.te
@@ -200,10 +200,24 @@
 allow init { dev_type -kmem_device -port_device -device }:chr_file { read open };
 auditallow init {
   dev_type
-  -kmem_device
-  -port_device
+  -alarm_device
+  -ashmem_device
+  -binder_device
+  -console_device
   -device
+  -devpts
+  -dm_device
+  -hwbinder_device
+  -hw_random_device
+  -keychord_device
+  -kmem_device
+  -kmsg_device
   -null_device
+  -owntty_device
+  -port_device
+  -ptmx_device
+  -random_device
+  -zero_device
 }:chr_file { read open };
 
 # chown/chmod on devices.