tequilaOS/platform_device_qcom_sepolicy-legacy-um
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

sepolicy : optimization [3/3] in file_contexts

Browse source 
Cleanup of file_contexts which are no longer needed or optimize
the regexp which can help in betterment in bootup time.

Change-Id: I9b59f7c46290e14bb32d91219d5c2de408a240d9
This commit is contained in:
Ravi Kumar Siddojigari 2019-07-05 14:11:32 +05:30 committed by Gerrit - the friendly Code Review server
parent 3fd8770e09
commit 40c4aa3116
2 changed files with 57 additions and 87 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
legacy/vendor/common/file.te vendored
View file

@ -396,9 +396,6 @@ type vendor_scve_data_file, file_type, data_file_type;
# usb device controller files
type sysfs_usb_controller, sysfs_type, fs_type;
# time data files
type time_data_file, file_type, data_file_type, core_data_file_type;
#qvrservice sysfs files
type sysfs_qvr_external_sensor, sysfs_type, fs_type;

141
legacy/vendor/common/file_contexts vendored
View file

@ -164,8 +164,10 @@
/dev/socket/qdma(/.*)? u:object_r:qdma_socket:s0
###################################
# System files
#
# vendor bins files
# there are still some bin which are build in system/vendor/bin
# we will do this cleanup later.
/(vendor|system/vendor)/bin/ATFWD-daemon u:object_r:atfwd_exec:s0
/(vendor|system/vendor)/bin/PktRspTest u:object_r:diag_exec:s0
/(vendor|system/vendor)/bin/audiod u:object_r:audiod_exec:s0
@ -215,7 +217,7 @@
/(vendor|system/vendor)/bin/mmi u:object_r:vendor_mmi_exec:s0
/(vendor|system/vendor)/bin/mmid u:object_r:vendor_mmi_exec:s0
/(vendor|system/vendor)/bin/qdcmss u:object_r:qdcm-ss_exec:s0
/(vendor|system/vendor)/bin/msm_irqbalance u:object_r:msm_irqbalanced_exec:s0
/(vendor|system/vendor)/bin/msm_irqbalance u:object_r:msm_irqbalanced_exec:s0
/(vendor|system/vendor)/bin/imsdatadaemon u:object_r:ims_exec:s0
/(vendor|system/vendor)/bin/imsqmidaemon u:object_r:ims_exec:s0
/(vendor|system/vendor)/bin/ims_rtp_daemon u:object_r:hal_imsrtp_exec:s0
@ -226,7 +228,7 @@
/(vendor|system/vendor)/bin/sensors.qti u:object_r:sensors_exec:s0
/(vendor|system/vendor)/bin/test_diag u:object_r:diag_exec:s0
/(vendor|system/vendor)/bin/thermal-engine u:object_r:thermal-engine_exec:s0
/(vendor|system/vendor)/bin/vm_bms u:object_r:vm_bms_exec:s0
/(vendor|system/vendor)/bin/vm_bms u:object_r:vm_bms_exec:s0
/(vendor|system/vendor)/bin/mm-qcamera-daemon u:object_r:mm-qcamerad_exec:s0
/(vendor|system/vendor)/bin/qfp-daemon u:object_r:qfp-daemon_exec:s0
/(vendor|system/vendor)/bin/qvop-daemon u:object_r:qvop-daemon_exec:s0
@ -234,7 +236,7 @@
/(vendor|system/vendor)/bin/rmt_storage u:object_r:rmt_storage_exec:s0
/(vendor|system/vendor)/bin/rfs_access u:object_r:rfs_access_exec:s0
/(vendor|system/vendor)/bin/tftp_server u:object_r:rfs_access_exec:s0
/(vendor|system/vendor)/bin/hvdcp u:object_r:hvdcp_exec:s0
/(vendor|system/vendor)/bin/hvdcp u:object_r:hvdcp_exec:s0
/(vendor|system/vendor)/bin/qseecomd u:object_r:tee_exec:s0
/(vendor|system/vendor)/bin/spdaemon u:object_r:spdaemon_exec:s0
/(vendor|system/vendor)/bin/sec_nvm u:object_r:sec_nvm_exec:s0
@ -245,18 +247,17 @@
/(vendor|system/vendor)/bin/wpa_cli u:object_r:wcnss_service_exec:s0
/(vendor|system/vendor)/bin/mdm_helper u:object_r:mdm_helper_exec:s0
/(vendor|system/vendor)/bin/mdm_helper_proxy u:object_r:mdm_helper_exec:s0
/(vendor|system/vendor)/bin/ks u:object_r:mdm_helper_exec:s0
/(vendor|system/vendor)/bin/ks u:object_r:mdm_helper_exec:s0
/(vendor|system/vendor)/bin/pm-service u:object_r:vendor_per_mgr_exec:s0
/(vendor|system/vendor)/bin/pm-proxy u:object_r:vendor_per_mgr_exec:s0
/(vendor|system/vendor)/bin/pd-mapper u:object_r:vendor_pd_mapper_exec:s0
/(vendor|system/vendor)/bin/pd-api-test u:object_r:vendor_pd_mapper_exec:s0
/(vendor|system/vendor)/bin/qcom-system-daemon u:object_r:vendor_qcomsysd_exec:s0
/(vendor|system/vendor)/bin/poweroffhandler u:object_r:poweroffhandler_exec:s0
/(vendor|system/vendor)/xbin/qlogd u:object_r:qlogd_exec:s0
/(vendor|system/vendor)/bin/ipacm u:object_r:ipacm_exec:s0
/(vendor|system/vendor)/bin/poweroffhandler u:object_r:poweroffhandler_exec:s0
/(vendor|system/vendor)/xbin/qlogd u:object_r:qlogd_exec:s0
/(vendor|system/vendor)/bin/ipacm u:object_r:ipacm_exec:s0
/(vendor|system/vendor)/bin/ipacm-diag u:object_r:ipacm-diag_exec:s0
/(vendor|system/vendor)/bin/dpmQmiMgr u:object_r:hal_dpmQmiMgr_exec:s0
#/(vendor|system/vendor)/bin/dpmd u:object_r:dpmd_exec:s0
/(vendor|system/vendor)/bin/ssr_setup u:object_r:vendor_ssr_setup_exec:s0
/(vendor|system/vendor)/bin/subsystem_ramdump u:object_r:vendor_subsystem_ramdump_exec:s0
/(vendor|system/vendor)/bin/ssr_diag u:object_r:vendor_ssr_diag_exec:s0
@ -365,19 +366,17 @@
/sys/class/thermal(/.*)? u:object_r:sysfs_thermal:s0
/sys/class/sensors(/.*)? u:object_r:sysfs_sensors:s0
/sys/class/uio(/.*)? u:object_r:sysfs_uio:s0
/sys/devices(/platform)?/soc/[a-z0-9]+.qcom,rmtfs_sharedmem/uio/uio[0-9]+(/.*)? u:object_r:sysfs_uio_file:s0
/sys/devices(/platform)?/soc/[a-z0-9]+.qcom,rmtfs_sharedmem/uio/uio[0-9]+/maps/map[0-9]+(/.*)? u:object_r:sysfs_uio_file:s0
/sys/devices(/platform)?/soc.0/[a-z0-9]+.qcom,rmtfs_sharedmem/uio/uio[0-9]+(/.*)? u:object_r:sysfs_uio_file:s0
/sys/devices(/platform)?/soc.0/[a-z0-9]+.qcom,rmtfs_sharedmem/uio/uio[0-9]+/maps/map[0-9]+(/.*)? u:object_r:sysfs_uio_file:s0
/sys/devices(/platform)?/soc/[a-f0-9]+.qcom,rmtfs_sharedmem/uio/uio[0-9]+(/.*)? u:object_r:sysfs_uio_file:s0
/sys/devices(/platform)?/soc/[a-f0-9]+.qcom,rmtfs_sharedmem/uio/uio[0-9]+/maps/map[0-9]+(/.*)? u:object_r:sysfs_uio_file:s0
/sys/devices/[^/]+bcl[^/]+(/.*)? u:object_r:sysfs_thermal:s0
/sys/devices/f9200000.*/power_supply/usb(/.*)? u:object_r:sysfs_usb_supply:s0
/sys/devices/msm_dwc3/power_supply/usb(/.*)? u:object_r:sysfs_usb_supply:s0
/sys/devices/msm_otg/power_supply/usb(/.*)? u:object_r:sysfs_usb_supply:s0
/sys/devices/platform/battery_current_limit u:object_r:sysfs_thermal:s0
/sys/devices/qpnp-charger.*/power_supply/battery(/.*)? u:object_r:sysfs_battery_supply:s0
/sys/class/qcom-battery(/.*)? u:object_r:sysfs_battery_supply:s0
/sys/class/charge_pump(/.*)? u:object_r:sysfs_battery_supply:s0
/sys/devices/soc/[a-z0-9]+.ssusb/power_supply/usb(/.*)? u:object_r:sysfs_usb_supply:s0
/sys/class/qcom-battery(/.*)? u:object_r:sysfs_battery_supply:s0
/sys/class/charge_pump(/.*)? u:object_r:sysfs_battery_supply:s0
/sys/devices/soc/[a-f0-9]+.ssusb/power_supply/usb(/.*)? u:object_r:sysfs_usb_supply:s0
/sys/devices/soc/qpnp-vadc-[0-9]+(/.*)? u:object_r:sysfs_vadc_dev:s0
/sys/bus/spmi/devices(/.*)? u:object_r:sysfs_spmi_dev:s0
/sys/kernel/irq_helper/irq_blacklist_on u:object_r:sysfs_irqbalance:s0
@ -455,12 +454,9 @@
/sys/devices/platform/soc/ae00000.qcom,mdss_mdp/backlight(/.*)? u:object_r:sysfs_graphics:s0
/sys/devices/virtual/switch/hdmi(/.*)? u:object_r:sysfs_graphics:s0
/sys/devices(/platform)?/soc/[a-f0-9]+.qcom,mdss_mdp/[a-z0-9]+.qcom,mdss_mdp:qcom,mdss_fb_primary/leds/lcd-backlight(/.*)? u:object_r:sysfs_graphics:s0
/sys/devices/soc.0/[a-f0-9]+.qcom,mdss_mdp/qcom,mdss_fb_primary.+[a-z0-9]/leds/lcd-backlight(/.*)? u:object_r:sysfs_graphics:s0
/sys/devices(/platform)?/soc/[a-f0-9]+.qcom,mdss_mdp/caps u:object_r:sysfs_graphics:s0
/sys/devices/soc/[a-f0-9]+.qcom,mdss_mdp/bw_mode_bitmap u:object_r:sysfs_graphics:s0
/sys/devices(/platform)?/soc/[a-f0-9]+.qcom,mdss_mdp/bw_mode_bitmap u:object_r:sysfs_graphics:s0
/sys/devices/soc.0/[a-f0-9]+.qcom,mdss_mdp/bw_mode_bitmap u:object_r:sysfs_graphics:s0
/sys/devices/soc.0/[a-f0-9]+.qcom,mdss_mdp/caps u:object_r:sysfs_graphics:s0
/sys/devices(/platform)?/soc/[a-f0-9]+.qcom,mdss_cam/video4linux/video[0-33]/name(/.*)? u:object_r:sysfs_graphics:s0
/sys/devices(/platform)?/soc/[a-f0-9]+.qcom,mdss_rotator/video4linux/video[0-33]/name(/.*)? u:object_r:sysfs_graphics:s0
/sys/devices(/platform)?/soc/[a-f0-9]+.qcom,mdss_rotator/caps u:object_r:sysfs_graphics:s0
@ -497,7 +493,7 @@
/sys/devices(/platform)?/soc/[a-f0-9]+.qcom,kgsl-3d0/devfreq/[a-f0-9]+.qcom,kgsl-3d0(/.*)? u:object_r:sysfs_kgsl:s0
/sys/devices(/platform)?/soc/[a-f0-9]+.qcom,kgsl-3d0/kgsl/kgsl-3d0/snapshot(/.*)? u:object_r:sysfs_kgsl_snapshot:s0
/sys/devices(/platform)?/soc(.[0-9])?/[a-f0-9]+.sdhci/mmc_host/mmc0/clk_scaling(/.*)? u:object_r:sysfs_mmc_host:s0
/sys/devices(/platform)?/soc/[a-f0-9]+.sdhci/mmc_host/mmc0/clk_scaling(/.*)? u:object_r:sysfs_mmc_host:s0
/sys/devices(/platform)?/soc/[a-f0-9]+.sdhci/mmc_host/mmc[0-9]/mmc0:[0-9]+/block/mmcblk[0-9]/bdi/read_ahead_kb u:object_r:sysfs_mmc_host:s0
/sys/devices(/platform)?/soc/[a-f0-9]+.sdhci/mmc_host/mmc[0-9]/mmc0:[0-9]+/block/mmcblk[0-9]/queue/read_ahead_kb u:object_r:sysfs_mmc_host:s0
/sys/devices(/platform)?/soc/[a-f0-9]+.sdhci/mmc_host/mmc[0-9]/mmc0:[0-9]+/block/mmcblk[0-9]/mmcblk0rpmb/bdi/read_ahead_kb u:object_r:sysfs_mmc_host:s0
@ -526,11 +522,11 @@
/sys/module/vmpressure(/.*)? u:object_r:sysfs_vmpressure:s0
/sys/board_properties/virtualkeys.synaptics_dsx u:object_r:sysfs_virtualkeys:s0
/sys/board_properties/virtualkeys.ft5x06_ts u:object_r:sysfs_virtualkeys:s0
/sys/kernel/debug/ipc_logging(/.*)? u:object_r:qti_debugfs:s0
###################################
# data files
# data files-- only vendor paths should be added
#
/data/time(/.*)? u:object_r:time_data_file:s0
/data/vendor/nfc(/.*)? u:object_r:nfc_vendor_data_file:s0
/data/vendor/audio(/.*)? u:object_r:vendor_audio_data_file:s0
/data/vendor/connectivity(/.*)? u:object_r:cnd_data_file:s0
@ -575,7 +571,6 @@
/data/vendor/ssrdump(/.*)? u:object_r:ramdump_vendor_data_file:s0
/data/vendor/ramdump(/.*)? u:object_r:vendor_ramdump_data_file:s0
/data/vendor/mdmhelperdata(/.*)? u:object_r:vendor_mdmhelperdata_data_file:s0
/sys/kernel/debug/ipc_logging(/.*)? u:object_r:qti_debugfs:s0
/data/vendor/misc/qsee(/.*)? u:object_r:data_qsee_file:s0
/data/vendor/tui(/.*)? u:object_r:vendor_tui_data_file:s0
/data/vendor/nnhal(/.*)? u:object_r:hal_neuralnetworks_data_file:s0
@ -583,53 +578,31 @@
/data/vendor/scve(/.*)? u:object_r:vendor_scve_data_file:s0
/data/vendor/fm(/.*)? u:object_r:vendor_fm_data_file:s0
/data/vendor/sensors(/.*)? u:object_r:sensors_vendor_data_file:s0
###################################
# persist files
#
/persist(/.*)? u:object_r:mnt_vendor_file:s0
/mnt/vendor/persist/bluetooth(/.*)? u:object_r:persist_bluetooth_file:s0
/mnt/vendor/persist/drm(/.*)? u:object_r:persist_drm_file:s0
/mnt/vendor/persist/sensors(/.*)? u:object_r:sensors_persist_file:s0
/mnt/vendor/persist/alarm(/.*)? u:object_r:persist_alarm_file:s0
/mnt/vendor/persist/time(/.*)? u:object_r:persist_time_file:s0
/mnt/vendor/persist/data(/.*)? u:object_r:persist_drm_file:s0
/mnt/vendor/persist/data/tz(/.*)? u:object_r:persist_drm_file:s0
/mnt/vendor/persist/data/sfs(/.*)? u:object_r:persist_drm_file:s0
/mnt/vendor/persist/qti_fp(/.*)? u:object_r:persist_qti_fp_file:s0
/mnt/vendor/persist/usf(/.*)? u:object_r:persist_usf_file:s0
/mnt/vendor/persist/hlos_rfs(/.*)? u:object_r:persist_rfs_shared_hlos_file:s0
/mnt/vendor/persist/display(/.*)? u:object_r:persist_display_file:s0
/mnt/vendor/persist/rfs.* u:object_r:persist_rfs_file:s0
/mnt/vendor/persist/speccfg(/.*)? u:object_r:regionalization_file:s0
/mnt/vendor/persist/misc(/.*)? u:object_r:persist_misc_file:s0
/mnt/vendor/persist/bms(/.*)? u:object_r:persist_bms_file:s0
/mnt/vendor/persist/vpp(/.*)? u:object_r:persist_vpp_file:s0
/mnt/vendor/persist/secnvm(/.*)? u:object_r:persist_secnvm_file:s0
/mnt/vendor/persist/FTM_AP(/.*)? u:object_r:vendor_persist_mmi_file:s0
/mnt/vendor/persist/hvdcp_opti(/.*)? u:object_r:persist_hvdcp_file:s0
###################################
# persist changes for backword comptaibily
# this changes would be removed once tech team make the changes
#
/persist/bluetooth(/.*)? u:object_r:persist_bluetooth_file:s0
/persist/drm(/.*)? u:object_r:persist_drm_file:s0
/persist/sensors(/.*)? u:object_r:sensors_persist_file:s0
/persist/alarm(/.*)? u:object_r:persist_alarm_file:s0
/persist/time(/.*)? u:object_r:persist_time_file:s0
/persist/data(/.*)? u:object_r:persist_drm_file:s0
/persist/data/tz(/.*)? u:object_r:persist_drm_file:s0
/persist/data/sfs(/.*)? u:object_r:persist_drm_file:s0
/persist/qti_fp(/.*)? u:object_r:persist_qti_fp_file:s0
/persist/usf(/.*)? u:object_r:persist_usf_file:s0
/persist/hlos_rfs(/.*)? u:object_r:persist_rfs_shared_hlos_file:s0
/persist/display(/.*)? u:object_r:persist_display_file:s0
/persist/rfs.* u:object_r:persist_rfs_file:s0
/persist/speccfg(/.*)? u:object_r:regionalization_file:s0
/persist/misc(/.*)? u:object_r:persist_misc_file:s0
/persist/bms(/.*)? u:object_r:persist_bms_file:s0
/persist/vpp(/.*)? u:object_r:persist_vpp_file:s0
/persist/secnvm(/.*)? u:object_r:persist_secnvm_file:s0
/persist/FTM_AP(/.*)? u:object_r:vendor_persist_mmi_file:s0
# persist files --only mnt/vendor/persist should be added here
/mnt/vendor/persist/bluetooth(/.*)? u:object_r:persist_bluetooth_file:s0
/mnt/vendor/persist/drm(/.*)? u:object_r:persist_drm_file:s0
/mnt/vendor/persist/sensors(/.*)? u:object_r:sensors_persist_file:s0
/mnt/vendor/persist/alarm(/.*)? u:object_r:persist_alarm_file:s0
/mnt/vendor/persist/time(/.*)? u:object_r:persist_time_file:s0
/mnt/vendor/persist/data(/.*)? u:object_r:persist_drm_file:s0
/mnt/vendor/persist/data/tz(/.*)? u:object_r:persist_drm_file:s0
/mnt/vendor/persist/data/sfs(/.*)? u:object_r:persist_drm_file:s0
/mnt/vendor/persist/qti_fp(/.*)? u:object_r:persist_qti_fp_file:s0
/mnt/vendor/persist/usf(/.*)? u:object_r:persist_usf_file:s0
/mnt/vendor/persist/hlos_rfs(/.*)? u:object_r:persist_rfs_shared_hlos_file:s0
/mnt/vendor/persist/display(/.*)? u:object_r:persist_display_file:s0
/mnt/vendor/persist/rfs.* u:object_r:persist_rfs_file:s0
/mnt/vendor/persist/speccfg(/.*)? u:object_r:regionalization_file:s0
/mnt/vendor/persist/misc(/.*)? u:object_r:persist_misc_file:s0
/mnt/vendor/persist/bms(/.*)? u:object_r:persist_bms_file:s0
/mnt/vendor/persist/vpp(/.*)? u:object_r:persist_vpp_file:s0
/mnt/vendor/persist/secnvm(/.*)? u:object_r:persist_secnvm_file:s0
/mnt/vendor/persist/FTM_AP(/.*)? u:object_r:vendor_persist_mmi_file:s0
/mnt/vendor/persist/hvdcp_opti(/.*)? u:object_r:persist_hvdcp_file:s0
###################################
# etc files
@ -653,9 +626,11 @@
/vendor/package(/.*)?/overlay(/.*)? u:object_r:vendor_overlay_file:s0
/vendor/package(/.*)?/app(/.*)? u:object_r:vendor_app_file:s0
# same-process HAL files and their dependencies
#######################################
# .so File which needs to be shared across Treble boundary
# are labeled as same-process HAL files
# .so dependent chain also need to be in this list so adding this.
#
/vendor/lib(64)?/hw/gralloc\.msm8998\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/hw/android\.hardware\.graphics\.mapper@2\.0-impl-qti-display\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/vendor\.qti\.hardware\.display\.mapper@1\.0\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/vendor\.qti\.hardware\.display\.mapper@1\.1\.so u:object_r:same_process_hal_file:s0
@ -670,7 +645,6 @@
/vendor/lib(64)?/libadreno_utils\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libgsl\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/hw/vulkan\.msm8998\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/hw/vulkan\.adreno\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libEGL_adreno\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libGLESv1_CM_adreno\.so u:object_r:same_process_hal_file:s0
@ -721,7 +695,7 @@
/vendor/lib(64)?/libmmi_jni\.so u:object_r:same_process_hal_file:s0
# libqti_vndfwk_detect libs
/vendor/lib(64)?/libvndfwk_detect_jni\.qti\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libvndfwk_detect_jni\.qti\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libqti_vndfwk_detect\.so u:object_r:same_process_hal_file:s0
# Fastcv libs
@ -730,24 +704,23 @@
/vendor/lib(64)?/libfastcvopt\.so u:object_r:same_process_hal_file:s0
# SVA files
/vendor/lib(64)?/liblistenjni\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/liblistensoundmodel2\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/liblistenjni\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/liblistensoundmodel2\.so u:object_r:same_process_hal_file:s0
# libnpu
/vendor/lib(64)?/libnpu\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libnpu\.so u:object_r:same_process_hal_file:s0
###################################
# firmware images
# firmware images -- Only Vendor path should be added here
#
/vendor/firmware(/.*)? u:object_r:vendor_firmware_file:s0
#/system/vendor/firmware(/.*)? u:object_r:firmware_file:s0
/vendor/bt_firmware(/.*)? u:object_r:bt_firmware_file:s0
/vendor/firmware_mnt(/.*)? u:object_r:firmware_file:s0
/vendor/firmware(/.*)? u:object_r:vendor_firmware_file:s0
/vendor/bt_firmware(/.*)? u:object_r:bt_firmware_file:s0
/vendor/firmware_mnt(/.*)? u:object_r:firmware_file:s0
/(vendor|system/vendor)/bin/grep u:object_r:vendor_toolbox_exec:s0
##################################
#vendor toolbox
#
/(vendor|system/vendor)/bin/toolbox_vendor u:object_r:vendor_toolbox_exec:s0
/(vendor|system/vendor)/bin/toolbox_vendor u:object_r:vendor_toolbox_exec:s0
/(vendor|system/vendor)/bin/grep u:object_r:vendor_toolbox_exec:s0
#Android NN Driver
/(vendor|system/vendor)/bin/hw/android\.hardware\.neuralnetworks@1\.2-service-qti u:object_r:hal_neuralnetworks_default_exec:s0