tequilaOS/platform_device_qcom_sepolicy-legacy-um
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge tag 'LA.UM.12.2.1.r1-02900-sdm660.0' into staging/lineage-21.0_merge-LA.UM.12.2.1.r1-02900-sdm660.0

Browse source 
"LA.UM.12.2.1.r1-02900-sdm660.0"

* tag 'LA.UM.12.2.1.r1-02900-sdm660.0':
  Sepolicy : Allow vendor_init to access bluetooth prop.
  Add sepolicy dir and sock permissions to location module
  location AVC denials during user profile switch

 Conflicts:
	legacy/vendor/common/property_contexts

Change-Id: Ic870aa5f9abe177e4d8c00a1bf3d9b66b67e3d75
This commit is contained in:
Michael Bestas 2024-03-29 12:08:16 +02:00
commit 7eabf65ff9
No known key found for this signature in database
GPG key ID: CC95044519BE6669
4 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
legacy/vendor/common/property_contexts vendored
View file

@ -27,6 +27,7 @@
persist.vendor.service.bdroid. u:object_r:vendor_bluetooth_prop:s0
persist.vendor.bt.soc.scram_freqs u:object_r:vendor_bluetooth_prop:s0
persist.vendor.bt.a2dp_offload_cap u:object_r:vendor_bluetooth_prop:s0
persist.vendor.bluetooth. u:object_r:vendor_bluetooth_prop:s0
persist.vendor.bluetooth.a2dp. u:object_r:vendor_bluetooth_prop:s0
persist.vendor.qcom.bluetooth. u:object_r:vendor_bluetooth_prop:s0

5
legacy/vendor/sdm660/hal_wifi_supplicant.te vendored Normal file
View file

@ -0,0 +1,5 @@
# Copyright (c) 2024 Qualcomm Innovation Center, Inc. All rights reserved.
# SPDX-License-Identifier: BSD-3-Clause-Clear
# # Allow wpa_supplicant to send back wifi information to location
allow hal_wifi_supplicant_default location:unix_dgram_socket sendto;

3
legacy/vendor/sdm660/location.te vendored
View file

@ -5,3 +5,6 @@
# allows location to access ssgtzd socket
allow location ssgtzd_socket:sock_file write;
# /data/vendor/wifi
allow location wifi_vendor_data_file:dir rw_dir_perms;

3
legacy/vendor/sdm660/location_app.te vendored
View file

@ -31,3 +31,6 @@
allow vendor_location_app sysfs_kgsl_gpu_model:file r_file_perms;
dontaudit vendor_location_app default_android_service:service_manager {find};
allow vendor_location_app system_data_file:dir {search};
allow vendor_location_app user_profile_root_file:dir {search};