tequilaOS/platform_device_qcom_sepolicy-legacy-um
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Update SE Linux configurations for ss-restart, ss-services

Browse source 
Update property paths to use 'vendor' in name

Change-Id: I40e88096c136d11b1725dc95a5166ebe3bb0f6d1
This commit is contained in:
Aravind Asam 2018-03-27 12:52:54 -07:00 committed by Gerrit - the friendly Code Review server
parent c5367878c3
commit ddc381d563
7 changed files with 22 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
vendor/common/file.te vendored
View file

@ -97,6 +97,7 @@ type sensors_vendor_data_file, file_type, data_file_type;
type port_bridge_data_file, file_type, data_file_type;
type vendor_firmware_file, vendor_file_type, file_type;
type bt_firmware_file, fs_type, contextmount_type;
type vendor_mdmhelperdata_data_file, file_type, data_file_type;
#widevine data file
type vendor_mediadrm_data_file, file_type, data_file_type;

1
vendor/common/file_contexts vendored
View file

@ -206,6 +206,7 @@
/data/vendor/misc/qsee(/.*)? u:object_r:data_qsee_file:s0
/data/vendor/tui(/.*)? u:object_r:vendor_tui_data_file:s0
/data/vendor/mdmhelperdata(/.*)? u:object_r:vendor_mdmhelperdata_data_file:s0
# audio_data_file
/data/vendor/audio(/.*)? u:object_r:vendor_audio_data_file:s0

1
vendor/common/pd_services.te vendored
View file

@ -12,3 +12,4 @@ allow pd_mapper self:socket create_socket_perms;
allowxperm pd_mapper self:socket ioctl IPC_ROUTER_IOCTL_BIND_CONTROL_PORT;
allow pd_mapper sysfs_data:file r_file_perms;
get_prop(pd_mapper, vendor_pd_locater_dbg_prop)

7
vendor/common/property.te vendored
View file

@ -32,6 +32,7 @@ type vendor_system_prop, property_type;
#imsrcsservice
type ctl_vendor_imsrcsservice_prop, property_type;
#mpdecision
type vendor_mpdecision_prop, property_type;
@ -40,3 +41,9 @@ type ctl_vendor_hbtp_prop, property_type;
# Bluetooth props
type vendor_bluetooth_prop, property_type;
#ss-restart
type vendor_ssr_prop, property_type;
#ss-services (PD)
type vendor_pd_locater_dbg_prop, property_type;

7
vendor/common/property_contexts vendored
View file

@ -51,6 +51,7 @@ vendor.peripheral. u:object_r:per_mgr_state_prop:s0
vendor.ims. u:object_r:ims_prop:s0
wc_transport. u:object_r:wc_prop:s0
ctl.vendor.imsrcsservice u:object_r:ctl_vendor_imsrcsservice_prop:s0
#mpdecision
vendor.post_boot.parsed u:object_r:vendor_mpdecision_prop:s0
ro.vendor.perf.cores_online u:object_r:vendor_mpdecision_prop:s0
@ -63,3 +64,9 @@ persist.vendor.radio u:object_r:vendor_radio_prop:s0
vendor.radio u:object_r:vendor_radio_prop:s0
ro.vendor.ril. u:object_r:vendor_radio_prop:s0
persist.vendor.sys. u:object_r:vendor_system_prop:s0
#ss-restart
persist.vendor.ssr. u:object_r:vendor_ssr_prop:s0
#ss-services (PD)
persist.vendor.pd_locater_debug u:object_r:vendor_pd_locater_dbg_prop:s0

2
vendor/common/ssr_setup.te vendored
View file

@ -12,3 +12,5 @@ allow ssr_setup sysfs_ssr:lnk_file w_file_perms;
allow ssr_setup sysfs_ssr_toggle:file rw_file_perms;
allow ssr_setup sysfs_data:file r_file_perms;
get_prop(ssr_setup, vendor_ssr_prop)

3
vendor/common/subsystem_ramdump.te vendored
View file

@ -14,4 +14,7 @@ userdebug_or_eng(`
allow subsystem_ramdump ramdump_vendor_data_file:file create_file_perms;
set_prop(subsystem_ramdump, ssr_prop);
allow subsystem_ramdump vendor_mdmhelperdata_data_file:dir r_dir_perms;
allow subsystem_ramdump vendor_mdmhelperdata_data_file:file r_file_perms;
')