onclite: sepolicy: Address denials

Signed-off-by: Dhina17 <dhinalogu@gmail.com>

sepolicy/bootanim.te

+allow bootanim sysfs_kgsl:dir { search };

sepolicy/cameraserver.te

+allow cameraserver vendor_file:file { execute getattr open read };

sepolicy/hal_audio_default.te

+allow hal_audio_default sysfs:dir { open read};

sepolicy/init.te

 allow init proc_boot_reason:file r_file_perms;
+allow init system_file:file { execute_no_trans };
+allow init vendor_file:file { execute execute_no_trans };

sepolicy/qti_init_shell.te

 typeattribute qti_init_shell data_between_core_and_vendor_violators;
 
+allow qti_init_shell proc_boot_reason:file { open read };
 allow qti_init_shell proc_touchpanel:dir { r_dir_perms setattr };
 allow qti_init_shell proc_touchpanel:file { getattr setattr };
 allow qti_init_shell bluetooth_data_file:file r_file_perms;

sepolicy/surfaceflinger.te

+allow surfaceflinger vendor_firmware_file:file {open read};

sepolicy/thermal-engine.te

+allow thermal-engine system_prop:file { getattr open read };
+allow thermal-engine sysfs:dir { open read };
+allow thermal-engine property_socket:sock_file { write };
+allow thermal-engine init:unix_stream_socket {connectto };
+

sepolicy/vendor_init.te

@@ -9,3 +9,5 @@ allow vendor_init {
   wifi_data_file
   wpa_socket
 }:dir { create search getattr open read setattr ioctl write add_name remove_name rmdir relabelfrom };
+
+allow vendor_init fm_prop:file { getattr open read };

sepolicy/vold.te

 allow vold proc_touchpanel:dir r_dir_perms;
+allow vold tee_device:chr_file {read write};
+allow vold vendor_file:file { getattr open read };

sepolicy/wcnss_service.te

+allow wcnss_service property_socket:sock_file { write };
+allow wcnss_service init:unix_stream_socket { connectto };
+allow wcnss_service system_prop:file { getattr open read };