tequilaOS/platform_device_qcom_sepolicy-legacy-um
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Sepolicy: Add permissions to set vendor boot mode prop for Factory HIDL"

Browse source
This commit is contained in:
qctecmdr 2019-06-11 06:52:29 -07:00 committed by Gerrit - the friendly Code Review server
commit b362bed0fa
3 changed files with 8 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
legacy/vendor/common/hal_factory_qti_default.te vendored
View file

@ -38,4 +38,7 @@ allow vendor_hal_factory_qti vendor_mmi_socket:sock_file rw_file_perms;
allow vendor_hal_factory_qti vendor_mmi:unix_stream_socket connectto;
allow vendor_hal_factory_qti_default mnt_vendor_file:dir search;
allow vendor_hal_factory_qti_default vendor_persist_mmi_file:dir rw_dir_perms;
allow vendor_hal_factory_qti_default vendor_persist_mmi_file:file create_file_perms;
allow vendor_hal_factory_qti_default vendor_persist_mmi_file:file create_file_perms;
# Allow set vendor.sys.boot_mode property
set_prop(vendor_hal_factory_qti_default, vendor_boot_mode_prop);

3
legacy/vendor/common/system_app.te vendored Normal file → Executable file
View file

@ -155,9 +155,6 @@ allow system_app system_data_file:dir read;
# allow system app to interact with hal_qteeconnector
hal_client_domain(system_app, hal_qteeconnector);
#allow system_app access boot mode switch
set_prop(system_app, vendor_boot_mode_prop)
# allow access to cache recovery for LK3
allow system_app cache_file:dir create_dir_perms;
allow system_app cache_file:file create_file_perms;

5
qva/vendor/common/hal_factory_qti_default.te vendored
View file

@ -38,4 +38,7 @@ allow vendor_hal_factory_qti vendor_mmi_socket:sock_file rw_file_perms;
allow vendor_hal_factory_qti vendor_mmi:unix_stream_socket connectto;
allow vendor_hal_factory_qti_default mnt_vendor_file:dir search;
allow vendor_hal_factory_qti_default vendor_persist_mmi_file:dir rw_dir_perms;
allow vendor_hal_factory_qti_default vendor_persist_mmi_file:file create_file_perms;
allow vendor_hal_factory_qti_default vendor_persist_mmi_file:file create_file_perms;
# Allow set vendor.sys.boot_mode property
set_prop(vendor_hal_factory_qti_default, vendor_boot_mode_prop);