tequilaOS/platform_device_qcom_sepolicy-legacy-um
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

sepolicy: adding vendor prefix to avoid naming colision

Browse source 
Update legacy properties with vendor prefix to void VTS failure
due to API30 changes

CRs-Fixed: 2825382

Change-Id: I39a5de4ad6450d805bf74e88aabc38c8347d89a4
This commit is contained in:
Eruvaram Kumar Raja Reddy 2020-11-22 07:09:28 +05:30
parent 9871e2edb6
commit f997082943
49 changed files with 183 additions and 183 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
legacy/vendor/common/adsprpcd.te vendored
View file

@ -38,8 +38,8 @@ allow adsprpcd xdsp_device:chr_file r_file_perms;
# For reading dir/files on /dsp
r_dir_file(adsprpcd, adsprpcd_file)
# For reading adsprpc_prop
get_prop(adsprpcd, adsprpc_prop)
# For reading vendor_adsprpc_prop
get_prop(adsprpcd, vendor_adsprpc_prop)
allow adsprpcd ion_device:chr_file r_file_perms;
allow adsprpcd mnt_vendor_file:dir r_dir_perms;

6
legacy/vendor/common/app.te vendored
View file

@ -28,9 +28,9 @@
#Allow all apps to open and send ioctl to qdsp device
allow appdomain qdsp_device:chr_file r_file_perms;
get_prop(appdomain, hwui_prop)
get_prop(appdomain, bservice_prop)
get_prop(appdomain, reschedule_service_prop)
get_prop(appdomain, vendor_hwui_prop)
get_prop(appdomain, vendor_bservice_prop)
get_prop(appdomain, vendor_reschedule_service_prop)
get_prop(appdomain, vendor_iop_prop)
get_prop(appdomain, vendor_scroll_prop)

4
legacy/vendor/common/cameraserver.te vendored
View file

@ -48,8 +48,8 @@ allow cameraserver qdsp_device:chr_file r_file_perms;
allow cameraserver xdsp_device:chr_file r_file_perms;
get_prop(cameraserver, camera_prop)
#allow cameraserver to read adsprpc_prop
get_prop(cameraserver, adsprpc_prop)
#allow cameraserver to read vendor_adsprpc_prop
get_prop(cameraserver, vendor_adsprpc_prop)
#need this in full_treble for camera perview
allow cameraserver hal_allocator:fd use;

4
legacy/vendor/common/cdsprpcd.te vendored
View file

@ -35,8 +35,8 @@ init_daemon_domain(cdsprpcd)
# For reading dir/files on /dsp
r_dir_file(cdsprpcd, adsprpcd_file)
# For reading adsprpc_prop
get_prop(cdsprpcd, adsprpc_prop)
# For reading vendor_adsprpc_prop
get_prop(cdsprpcd, vendor_adsprpc_prop)
allow cdsprpcd qdsp_device:chr_file r_file_perms;
allow cdsprpcd ion_device:chr_file r_file_perms;

2
legacy/vendor/common/chre.te vendored
View file

@ -33,7 +33,7 @@ type chre_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(chre)
r_dir_file(chre, adsprpcd_file)
get_prop(chre, adsprpc_prop)
get_prop(chre, vendor_adsprpc_prop)
allow chre ion_device:chr_file r_file_perms;
allow chre qdsp_device:chr_file r_file_perms;

2
legacy/vendor/common/cnd.te vendored
View file

@ -61,7 +61,7 @@ allow cnd self:{
allow cnd self:netlink_tcpdiag_socket nlmsg_read;
# allow cnd to set cnd property
set_prop(cnd, cnd_vendor_prop)
set_prop(cnd, vendor_cnd_vendor_prop)
# allow cnd to access cnd_data_file
allow cnd cnd_data_file:file create_file_perms;

2
legacy/vendor/common/dataservice_app.te vendored
View file

@ -25,7 +25,7 @@
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
get_prop(vendor_dataservice_app, cnd_vendor_prop)
get_prop(vendor_dataservice_app, vendor_cnd_vendor_prop)
allow vendor_dataservice_app sysfs_data:file r_file_perms;

2
legacy/vendor/common/domain.te vendored
View file

@ -62,7 +62,7 @@ allowxperm domain domain:icmp_socket ioctl { unpriv_sock_ioctls unpriv_tty_ioctl
# For compliance testing test suite reads vendor_security_path_level
# Which is the public readable property “ ro.vendor.build.security_patch
get_prop(domain, vendor_security_patch_level_prop)
get_prop(domain, public_vendor_default_prop)
get_prop(domain, vendor_public_vendor_default_prop)
allow domain qti_debugfs:dir search;

2
legacy/vendor/common/dspservice.te vendored
View file

@ -47,7 +47,7 @@ hal_attribute_hwservice(vendor_hal_dspmanager, vendor_hal_dspmanager_hwservice)
r_dir_file(vendor_dspservice, adsprpcd_file)
# For reading "vendor.fastrpc." properties
get_prop(vendor_dspservice, adsprpc_prop)
get_prop(vendor_dspservice, vendor_adsprpc_prop)
# Allow access to adsprpc secure and non-secure devices
allow vendor_dspservice qdsp_device:chr_file r_file_perms;

4
legacy/vendor/common/hal_camera.te vendored
View file

@ -79,7 +79,7 @@ allow hal_camera qdsp_device:chr_file r_file_perms;
#allow camera to access /dsp
r_dir_file(hal_camera, adsprpcd_file);
#allow camera to access adsprpc_prop
get_prop(hal_camera, adsprpc_prop)
#allow camera to access vendor_adsprpc_prop
get_prop(hal_camera, vendor_adsprpc_prop)
allow hal_camera_default mm-qcamerad:unix_dgram_socket sendto;

4
legacy/vendor/common/hal_factory_qti_default.te vendored
View file

@ -31,7 +31,7 @@ hal_server_domain(vendor_hal_factory_qti_default, vendor_hal_factory_qti)
type vendor_hal_factory_qti_default_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(vendor_hal_factory_qti_default)
set_prop(vendor_hal_factory_qti, ctl_vendor_mmid_prop)
set_prop(vendor_hal_factory_qti, vendor_ctl_vendor_mmid_prop)
# Allow read/write to mmi socket
allow vendor_hal_factory_qti vendor_mmi_socket:sock_file rw_file_perms;
@ -41,4 +41,4 @@ allow vendor_hal_factory_qti_default vendor_persist_mmi_file:dir rw_dir_perms;
allow vendor_hal_factory_qti_default vendor_persist_mmi_file:file create_file_perms;
# Allow set vendor.sys.boot_mode property
set_prop(vendor_hal_factory_qti_default, vendor_boot_mode_prop);
set_prop(vendor_hal_factory_qti_default, vendor_boot_mode_prop);

2
legacy/vendor/common/hal_gatekeeper_qti.te vendored
View file

@ -45,4 +45,4 @@ allow hal_gatekeeper_qti skp_device:chr_file rw_file_perms;
allow hal_gatekeeper_qti sp_keymaster_device:chr_file rw_file_perms;
allow hal_gatekeeper_qti sp_ssr_device:chr_file rw_file_perms;
get_prop(hal_gatekeeper_qti, spcomlib_prop)
get_prop(hal_gatekeeper_qti, vendor_spcomlib_prop)

2
legacy/vendor/common/hal_imsrtp.te vendored
View file

@ -58,6 +58,6 @@ allow hal_imsrtp ion_device:chr_file r_file_perms;
allow hal_imsrtp sysfs_data:file r_file_perms;
get_prop(hal_imsrtp, qcom_ims_prop)
get_prop(hal_imsrtp, vendor_qcom_ims_prop)
binder_call(hal_imsrtp, vendor_qtelephony)

2
legacy/vendor/common/hal_keymaster_qti.te vendored
View file

@ -44,4 +44,4 @@ allow hal_keymaster_qti skp_device:chr_file rw_file_perms;
allow hal_keymaster_qti sp_keymaster_device:chr_file rw_file_perms;
allow hal_keymaster_qti sp_ssr_device:chr_file rw_file_perms;
get_prop(hal_keymaster_qti, spcomlib_prop)
get_prop(hal_keymaster_qti, vendor_spcomlib_prop)

2
legacy/vendor/common/hal_neuralnetworks.te vendored
View file

@ -43,4 +43,4 @@ allow hal_neuralnetworks_default hal_neuralnetworks_data_file:{ file fifo_file }
allow hal_neuralnetworks_default gpu_device:chr_file rw_file_perms;
r_dir_file(hal_neuralnetworks_default, adsprpcd_file)
get_prop(hal_neuralnetworks_default, adsprpc_prop)
get_prop(hal_neuralnetworks_default, vendor_adsprpc_prop)

2
legacy/vendor/common/hal_nfc.te vendored
View file

@ -26,7 +26,7 @@
#IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
# Set NFC properties
set_prop(hal_nfc, nfc_nq_prop)
set_prop(hal_nfc, vendor_nfc_nq_prop)
#Allow access to firmware
allow hal_nfc firmware_file:dir r_dir_perms;

2
legacy/vendor/common/hal_perf_default.te vendored
View file

@ -41,7 +41,7 @@ allow hal_perf_client hal_perf_hwservice:hwservice_manager find;
allow hal_perf_default cgroup:file r_file_perms;
allow hal_perf_default proc:file rw_file_perms;
allow hal_perf device_latency:chr_file rw_file_perms;
get_prop(hal_perf, freq_prop)
get_prop(hal_perf, vendor_freq_prop)
get_prop(hal_perf, vendor_mpctl_prop)
allow hal_perf_default mpctl_data_file:dir rw_dir_perms;
allow hal_perf_default mpctl_data_file:file create_file_perms;

6
legacy/vendor/common/hal_rcsservice.te vendored
View file

@ -41,7 +41,7 @@ add_hwservice(hal_rcsservice, hal_imscallinfo_hwservice)
#add imsfactory to HIDl interface
add_hwservice(hal_rcsservice, vendor_hal_imsfactory_hwservice)
# allow read datad property
get_prop(hal_rcsservice, qcom_ims_prop)
get_prop(hal_rcsservice, vendor_qcom_ims_prop)
# allow imsrcsd to connect to imsdatad over socket
allow hal_rcsservice self: { socket qipcrtr_socket } create_socket_perms;
@ -65,5 +65,5 @@ userdebug_or_eng(`
binder_call(hal_rcsservice, radio)
')
set_prop(hal_rcsservice, ctl_vendor_imsrcsservice_prop)
set_prop(hal_rcsservice, qcom_ims_prop)
set_prop(hal_rcsservice, vendor_ctl_vendor_imsrcsservice_prop)
set_prop(hal_rcsservice, vendor_qcom_ims_prop)

2
legacy/vendor/common/hal_sensors.te vendored
View file

@ -30,7 +30,7 @@ userdebug_or_eng(`
diag_use(hal_sensors)
allow hal_sensors debugfs_tracing:file { open write };
')
set_prop(hal_sensors, slpi_prop);
set_prop(hal_sensors, vendor_slpi_prop);
allow hal_sensors self:{ socket qipcrtr_socket } create_socket_perms;
allowxperm hal_sensors self:{ socket qipcrtr_socket } ioctl msm_sock_ipc_ioctls;

2
legacy/vendor/common/hbtp.te vendored
View file

@ -68,7 +68,7 @@ allow hbtp self:capability { setgid setuid };
# Allow load touch driver as touchPD
r_dir_file(hbtp, adsprpcd_file)
get_prop(hbtp, adsprpc_prop)
get_prop(hbtp, vendor_adsprpc_prop)
# Allow the service to access wakelock capability
wakelock_use(hbtp)

2
legacy/vendor/common/hvdcp.te vendored
View file

@ -71,6 +71,6 @@ allow hvdcp mnt_vendor_file:dir search;
allow hvdcp persist_hvdcp_file:dir rw_dir_perms;
allow hvdcp persist_hvdcp_file:file create_file_perms;
set_prop(hvdcp, hvdcp_opti_prop)
set_prop(hvdcp, vendor_hvdcp_opti_prop)
wakelock_use(hvdcp)

8
legacy/vendor/common/ims.te vendored
View file

@ -59,8 +59,8 @@ allow ims {
# Talk to qumuxd via ims_socket
unix_socket_connect(ims, ims, qmuxd)
set_prop(ims, qcom_ims_prop)
set_prop(ims, ctl_vendor_imsrcsservice_prop)
set_prop(ims, vendor_qcom_ims_prop)
set_prop(ims, vendor_ctl_vendor_imsrcsservice_prop)
# permissions for communication with CNE in LBO use case
unix_socket_connect(ims, cnd, cnd)
@ -83,7 +83,7 @@ allowxperm ims self:udp_socket ioctl priv_sock_ioctls;
allow ims sysfs_data:file r_file_perms;
hwbinder_use(ims)
get_prop(ims, hwservicemanager_prop)
get_prop(ims, qcom_ims_prop)
get_prop(ims, cnd_vendor_prop)
get_prop(ims, vendor_qcom_ims_prop)
get_prop(ims, vendor_cnd_vendor_prop)
allow ims hal_datafactory_hwservice:hwservice_manager find;
binder_call(ims, cnd)

2
legacy/vendor/common/init-qti-ims-sh.te vendored
View file

@ -33,7 +33,7 @@ init_daemon_domain(init-qti-ims-sh)
allow init-qti-ims-sh vendor_shell_exec:file rx_file_perms;
allow init-qti-ims-sh vendor_toolbox_exec:file rx_file_perms;
set_prop(init-qti-ims-sh, qcom_ims_prop)
set_prop(init-qti-ims-sh, vendor_qcom_ims_prop)
# for ro.build.product
get_prop(init-qti-ims-sh, exported2_default_prop)

40
legacy/vendor/common/init_shell.te vendored
View file

@ -75,31 +75,31 @@ allow qti_init_shell self:capability {
};
# For property starting with hw
# freq_prop - for setting frequency from postboot script
# vendor_freq_prop - for setting frequency from postboot script
# vendor_mpctl_prop - for setting ctl.mpdecision property from postboot script
# vendor_bluetooth_prop - for setting bt related properties from postboot script
# ctl_vendor_qmuxd_prop/ctl_vendor_netmgrd_prop - Needed in order to set properties on qmuxd and netmgrd processes
set_prop(qti_init_shell, freq_prop)
set_prop(qti_init_shell, vendor_freq_prop)
set_prop(qti_init_shell, vendor_mpctl_prop)
set_prop(qti_init_shell, vendor_bluetooth_prop)
set_prop(qti_init_shell, sensors_prop)
set_prop(qti_init_shell, vendor_sensors_prop)
set_prop(qti_init_shell, vendor_msm_irqbalance_prop)
set_prop(qti_init_shell, vendor_msm_irqbl_sdm630_prop)
set_prop(qti_init_shell, vendor_ipacm_prop)
set_prop(qti_init_shell, vendor_ipacm-diag_prop)
set_prop(qti_init_shell, vendor_dataqti_prop)
set_prop(qti_init_shell, vendor_dataadpl_prop)
#set_prop(qti_init_shell, ctl_rildaemon_prop)
set_prop(qti_init_shell, ctl_qcrild_prop)
set_prop(qti_init_shell, ctl_vendor_rild_prop)
set_prop(qti_init_shell, ctl_vendor_qmuxd_prop)
set_prop(qti_init_shell, ctl_vendor_netmgrd_prop)
set_prop(qti_init_shell, ctl_vendor_port-bridge_prop)
#set_prop(qti_init_shell, vendor_ctl_rildaemon_prop)
set_prop(qti_init_shell, vendor_ctl_qcrild_prop)
set_prop(qti_init_shell, vendor_ctl_vendor_rild_prop)
set_prop(qti_init_shell, vendor_ctl_vendor_qmuxd_prop)
set_prop(qti_init_shell, vendor_ctl_vendor_netmgrd_prop)
set_prop(qti_init_shell, vendor_ctl_vendor_port-bridge_prop)
set_prop(qti_init_shell, vendor_display_prop)
set_prop(qti_init_shell, scr_enabled_prop)
set_prop(qti_init_shell, vendor_scr_enabled_prop)
set_prop(qti_init_shell, vendor_opengles_prop)
set_prop(qti_init_shell, vendor_mdm_helper_prop)
set_prop(qti_init_shell, fm_prop)
set_prop(qti_init_shell, vendor_fm_prop)
set_prop(qti_init_shell, vendor_alarm_boot_prop)
set_prop(qti_init_shell, vendor_gralloc_prop)
set_prop(qti_init_shell, vendor_audio_prop)
@ -116,16 +116,16 @@ set_prop(vendor_qti_init_shell,vendor_dcvs_prop)
set_prop(qti_init_shell, vendor_vm_bms_prop)
set_prop(qti_init_shell, vendor_usb_prop)
#Needed for setting hwui properties in post_boot
set_prop(qti_init_shell, hwui_prop)
set_prop(qti_init_shell, graphics_vulkan_prop)
set_prop(qti_init_shell, vendor_hwui_prop)
set_prop(qti_init_shell, vendor_graphics_vulkan_prop)
#Needed for setting vendor_cgroup_follow properties from post_boot
set_prop(qti_init_shell, vendor_cgroup_follow_prop)
#Needed for setting bservice properties from post_boot
set_prop(qti_init_shell, bservice_prop)
set_prop(qti_init_shell, vendor_bservice_prop)
#Needed for setting DSR properties from post_boot
set_prop(qti_init_shell, reschedule_service_prop)
set_prop(qti_init_shell, vendor_reschedule_service_prop)
#Needed for setting hvdcp properties from post_boot
set_prop(qti_init_shell, hvdcp_opti_prop)
set_prop(qti_init_shell, vendor_hvdcp_opti_prop)
get_prop(qti_init_shell, exported3_radio_prop)
set_prop(qti_init_shell, vendor_gpu_prop)
@ -224,7 +224,7 @@ allow qti_init_shell vendor_mbn_data_file:dir create_dir_perms;
allow qti_init_shell vendor_mbn_data_file:file create_file_perms;
set_prop(qti_init_shell, vendor_rild_libpath_prop);
set_prop(qti_init_shell, ctl_vendor_hbtp_prop)
set_prop(qti_init_shell, vendor_ctl_vendor_hbtp_prop)
set_prop(qti_init_shell, vendor_radio_prop)
allow qti_init_shell fm_qsoc_patches_exec:file rx_file_perms;
@ -277,8 +277,8 @@ allow qti_init_shell vendor_fm_data_file:dir ra_dir_perms;
allow qti_init_shell sysfs_android_usb:dir r_dir_perms;
allow qti_init_shell sysfs_android_usb:file rw_file_perms;
# allow read permisison for hvdcp_opti properties
get_prop(qti_init_shell, hvdcp_opti_prop)
# allow read permisison for vendor_hvdcp_opti properties
get_prop(qti_init_shell, vendor_hvdcp_opti_prop)
#allow set permission for vendor.fastrpc properties
set_prop(qti_init_shell, adsprpc_prop)
set_prop(qti_init_shell, vendor_adsprpc_prop)

4
legacy/vendor/common/location.te vendored
View file

@ -103,7 +103,7 @@ unix_socket_send(location, wifihal, hal_wifi_default);
netmgr_socket(location);
#Allow access to properties
set_prop(location, location_prop);
set_prop(location, vendor_location_prop);
#diag
userdebug_or_eng(`
@ -123,7 +123,7 @@ hal_client_domain(location, vendor_qccsyshal);
allow location hal_datafactory_hwservice:hwservice_manager find;
binder_call(location, cnd)
get_prop(location, cnd_vendor_prop)
get_prop(location, vendor_cnd_vendor_prop)
#Allow access to wake alarm
allow location self:capability2 wake_alarm;

2
legacy/vendor/common/mediacodec.te vendored
View file

@ -28,7 +28,7 @@
#mediacodec need intraction with audio device nodes
allow mediacodec msm_aac_in_device:chr_file rw_file_perms;
get_prop(mediacodec, adsprpc_prop)
get_prop(mediacodec, vendor_adsprpc_prop)
#Allow mediacodec to access proc_net files
allow mediacodec proc_net:file r_file_perms;

4
legacy/vendor/common/mediaserver.te vendored
View file

@ -50,8 +50,8 @@ r_dir_file(mediaserver, sysfs_thermal);
binder_call(mediaserver, wfdservice)
#allow mediaserver to access adsprpc_prop
get_prop(mediaserver, adsprpc_prop)
#allow mediaserver to access vendor_adsprpc_prop
get_prop(mediaserver, vendor_adsprpc_prop)
binder_call(mediaserver, bootanim);

4
legacy/vendor/common/mm-qcamerad.te vendored
View file

@ -79,8 +79,8 @@ allow mm-qcamerad xdsp_device:chr_file rw_file_perms;
#allow mm-qcamerad to access /dsp
r_dir_file(mm-qcamerad, adsprpcd_file);
#allow mm-qcamerad to access adsprpc_prop
get_prop(mm-qcamerad, adsprpc_prop)
#allow mm-qcamerad to access vendor_adsprpc_prop
get_prop(mm-qcamerad, vendor_adsprpc_prop)
r_dir_file(mm-qcamerad, firmware_file)
allow mm-qcamerad graphics_device:dir r_dir_perms;

2
legacy/vendor/common/nfc.te vendored
View file

@ -26,7 +26,7 @@
#IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
# Set NFC properties
get_prop(nfc, nfc_nq_prop)
get_prop(nfc, vendor_nfc_nq_prop)
#qmux_socket(nfc);
#allow nfc nfc_data_file:file x_file_perms;
allow nfc self:socket create_socket_perms_no_ioctl;

2
legacy/vendor/common/nqnfcinfo.te vendored
View file

@ -31,7 +31,7 @@ type nqnfcinfo_exec, exec_type, vendor_file_type, file_type;
# Started by init
init_daemon_domain(nqnfcinfo)
set_prop(nqnfcinfo, nfc_nq_prop);
set_prop(nqnfcinfo, vendor_nfc_nq_prop);
# Access device nodes inside /dev/nq-nci
allow nqnfcinfo nfc_device:chr_file rw_file_perms;

62
legacy/vendor/common/property.te vendored
View file

@ -26,40 +26,40 @@
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
# property for uicc_daemon
type qcom_ims_prop, property_type;
type ctl_vendor_qmuxd_prop, property_type;
type ctl_vendor_netmgrd_prop, property_type;
type ctl_vendor_port-bridge_prop, property_type;
type ctl_qcrild_prop, property_type;
type vendor_qcom_ims_prop, property_type;
type vendor_ctl_vendor_qmuxd_prop, property_type;
type vendor_ctl_vendor_netmgrd_prop, property_type;
type vendor_ctl_vendor_port-bridge_prop, property_type;
type vendor_ctl_qcrild_prop, property_type;
type vendor_tee_listener_prop, property_type;
type ctl_vendor_rild_prop, property_type;
type vendor_ctl_vendor_rild_prop, property_type;
# property for LKCore ctl start
type ctl_LKCore_prop, property_type;
type vendor_ctl_LKCore_prop, property_type;
type freq_prop, property_type;
type vendor_freq_prop, property_type;
type vendor_vm_bms_prop, property_type; #To start vm_bms
type vendor_dataqti_prop, property_type;
type vendor_dataadpl_prop, property_type;
type vendor_dataqdp_prop, property_type;
type vendor_ipacm_prop, property_type;
type vendor_ipacm-diag_prop, property_type;
type cnd_vendor_prop, property_type;
type sensors_prop, property_type;
type slpi_prop, property_type;
type vendor_cnd_vendor_prop, property_type;
type vendor_sensors_prop, property_type;
type vendor_slpi_prop, property_type;
type vendor_msm_irqbalance_prop, property_type;
type vendor_msm_irqbl_sdm630_prop, property_type;
type camera_prop, property_type;
type spcomlib_prop, property_type;
type vendor_spcomlib_prop, property_type;
type vendor_display_prop, property_type;
type scr_enabled_prop, property_type;
type bg_daemon_prop, property_type;
type bg_boot_complete_prop, property_type;
type vendor_scr_enabled_prop, property_type;
type vendor_bg_daemon_prop, property_type;
type vendor_bg_boot_complete_prop, property_type;
type vendor_opengles_prop, property_type;
type vendor_mdm_helper_prop, property_type;
type vendor_mpctl_prop, property_type;
type vendor_iop_prop, property_type;
type public_vendor_default_prop, property_type;
type vendor_public_vendor_default_prop, property_type;
#Scroll Pre-obtain
type vendor_scroll_prop, property_type;
@ -69,13 +69,13 @@ type vendor_am_prop, property_type;
#Needed for ubwc support
type vendor_gralloc_prop, property_type;
type fm_prop, property_type;
type vendor_fm_prop, property_type;
type chgdiabled_prop, property_type;
vendor_restricted_prop(vendor_xlat_prop);
# property for location
type location_prop, property_type;
type vendor_location_prop, property_type;
#properites for init.qcom.sh script
type vendor_usb_prop, property_type;
@ -90,26 +90,26 @@ type vendor_wifi_ftmd_prop, property_type;
# WIGIG
type vendor_wigig_prop, property_type;
type ctl_vendor_wigigsvc_prop, property_type;
type vendor_ctl_vendor_wigigsvc_prop, property_type;
#HWUI property
type hwui_prop, property_type;
type vendor_hwui_prop, property_type;
type graphics_vulkan_prop, property_type;
type vendor_graphics_vulkan_prop, property_type;
#cgroup follow
type vendor_cgroup_follow_prop, property_type;
#Bservice property
type bservice_prop, property_type;
type vendor_bservice_prop, property_type;
#Delayed Service Reschedule property
type reschedule_service_prop, property_type;
type vendor_reschedule_service_prop, property_type;
#boot mode property
type vendor_boot_mode_prop, property_type;
#properties for nfc
type nfc_nq_prop, property_type;
type vendor_nfc_nq_prop, property_type;
type vendor_rild_libpath_prop, property_type;
@ -122,17 +122,17 @@ type vendor_system_prop, property_type;
type vendor_bluetooth_prop, property_type;
# HBTP
type ctl_vendor_hbtp_prop, property_type;
type vendor_ctl_vendor_hbtp_prop, property_type;
# factory properties
type ctl_vendor_mmid_prop, property_type;
type vendor_ctl_vendor_mmid_prop, property_type;
#qcc property
#type vendor_qdma_prop, property_type;
vendor_public_prop(vendor_qcc_prop);
#imsrcsservice
type ctl_vendor_imsrcsservice_prop, property_type;
type vendor_ctl_vendor_imsrcsservice_prop, property_type;
#mmi
type vendor_mmi_prop, property_type;
@ -163,19 +163,19 @@ type vendor_softap_prop, property_type;
type vendor_video_prop, property_type;
#rmt_storage
type ctl_vendor_rmt_storage_prop, property_type;
type vendor_ctl_vendor_rmt_storage_prop, property_type;
type vendor_gpu_prop, property_type;
type vendor_data_ko_prop, property_type;
#hvdcp_opti
type hvdcp_opti_prop, property_type;
type vendor_hvdcp_opti_prop, property_type;
#adsprpc props
type adsprpc_prop, property_type;
type vendor_adsprpc_prop, property_type;
#qvr property
type qvr_prop, property_type;
type vendor_qvr_prop, property_type;
#capabilityconfigstore hal (CCHAL)
type vendor_cap_configstore_dbg_prop, property_type;

126
legacy/vendor/common/property_contexts vendored
View file

@ -32,41 +32,41 @@ persist.vendor.qcom.bluetooth. u:object_r:vendor_bluetooth_prop:s0
vendor.qcom.bluetooth. u:object_r:vendor_bluetooth_prop:s0
vendor.wc_transport. u:object_r:vendor_bluetooth_prop:s0
ro.vendor.bluetooth. u:object_r:vendor_bluetooth_prop:s0
vendor.ims. u:object_r:qcom_ims_prop:s0
ro.vendor.build.software.version u:object_r:qcom_ims_prop:s0
persist.vendor.ims. u:object_r:qcom_ims_prop:s0
persist.vendor.qti.telephony.vt_cam_interface u:object_r:qcom_ims_prop:s0
vendor.hw.fm. u:object_r:fm_prop:s0
ctl.vendor.qmuxd u:object_r:ctl_vendor_qmuxd_prop:s0
ctl.vendor.netmgrd u:object_r:ctl_vendor_netmgrd_prop:s0
ctl.vendor.port-bridge u:object_r:ctl_vendor_port-bridge_prop:s0
ctl.vendor.qcrild u:object_r:ctl_qcrild_prop:s0
ctl.vendor.ril-daemon u:object_r:ctl_vendor_rild_prop:s0
ctl.vendor.cnd u:object_r:cnd_vendor_prop:s0
persist.vendor.sys.cnd u:object_r:cnd_vendor_prop:s0
persist.vendor.cne. u:object_r:cnd_vendor_prop:s0
persist.vendor.cne.feature u:object_r:cnd_vendor_prop:s0
persist.vendor.cne.logging.qxdm u:object_r:cnd_vendor_prop:s0
persist.vendor.cnd. u:object_r:cnd_vendor_prop:s0
persist.vendor.cnd.wqe u:object_r:cnd_vendor_prop:s0
vendor.ims. u:object_r:vendor_qcom_ims_prop:s0
ro.vendor.build.software.version u:object_r:vendor_qcom_ims_prop:s0
persist.vendor.ims. u:object_r:vendor_qcom_ims_prop:s0
persist.vendor.qti.telephony.vt_cam_interface u:object_r:vendor_qcom_ims_prop:s0
vendor.hw.fm. u:object_r:vendor_fm_prop:s0
ctl.vendor.qmuxd u:object_r:vendor_ctl_vendor_qmuxd_prop:s0
ctl.vendor.netmgrd u:object_r:vendor_ctl_vendor_netmgrd_prop:s0
ctl.vendor.port-bridge u:object_r:vendor_ctl_vendor_port-bridge_prop:s0
ctl.vendor.qcrild u:object_r:vendor_ctl_qcrild_prop:s0
ctl.vendor.ril-daemon u:object_r:vendor_ctl_vendor_rild_prop:s0
ctl.vendor.cnd u:object_r:vendor_cnd_vendor_prop:s0
persist.vendor.sys.cnd u:object_r:vendor_cnd_vendor_prop:s0
persist.vendor.cne. u:object_r:vendor_cnd_vendor_prop:s0
persist.vendor.cne.feature u:object_r:vendor_cnd_vendor_prop:s0
persist.vendor.cne.logging.qxdm u:object_r:vendor_cnd_vendor_prop:s0
persist.vendor.cnd. u:object_r:vendor_cnd_vendor_prop:s0
persist.vendor.cnd.wqe u:object_r:vendor_cnd_vendor_prop:s0
ctl.vendor.vm_bms u:object_r:vendor_vm_bms_prop:s0
ro.vendor.qualcomm.bluetooth. u:object_r:vendor_bluetooth_prop:s0
ctl.vendor.ipacm u:object_r:vendor_ipacm_prop:s0
ctl.vendor.ipacm-diag u:object_r:vendor_ipacm-diag_prop:s0
ctl.vendor.dataqti u:object_r:vendor_dataqti_prop:s0
ctl.vendor.dataadpl u:object_r:vendor_dataadpl_prop:s0
ctl.vendor.sensors u:object_r:sensors_prop:s0
ctl.vendor.sensors u:object_r:vendor_sensors_prop:s0
ctl.vendor.msm_irqbalance u:object_r:vendor_msm_irqbalance_prop:s0
ctl.vendor.msm_irqbl_sdm630 u:object_r:vendor_msm_irqbl_sdm630_prop:s0
vendor.slpi. u:object_r:slpi_prop:s0
vendor.slpi. u:object_r:vendor_slpi_prop:s0
ctl.vendor.msm_irqbal_lb u:object_r:vendor_msm_irqbalance_prop:s0
vendor.spcom. u:object_r:spcomlib_prop:s0
vendor.spcom. u:object_r:vendor_spcomlib_prop:s0
vendor.display. u:object_r:vendor_display_prop:s0
ro.vendor.display. u:object_r:vendor_display_prop:s0
persist.vendor.display. u:object_r:vendor_display_prop:s0
ro.vendor.scr_enabled u:object_r:scr_enabled_prop:s0
vendor.bg_reset u:object_r:bg_daemon_prop:s0
vendor.bg.boot_complete u:object_r:bg_boot_complete_prop:s0
ro.vendor.scr_enabled u:object_r:vendor_scr_enabled_prop:s0
vendor.bg_reset u:object_r:vendor_bg_daemon_prop:s0
vendor.bg.boot_complete u:object_r:vendor_bg_boot_complete_prop:s0
vendor.opengles.version u:object_r:vendor_opengles_prop:s0
ro.vendor.qualcomm.bt.hci_transport u:object_r:vendor_bluetooth_prop:s0
ctl.vendor.mdm_helper u:object_r:vendor_mdm_helper_prop:s0
@ -80,7 +80,7 @@ vendor.perf.iop_v3.enable u:object_r:vendor_iop_prop:s0
vendor.perf.iop_v3.enable.debug u:object_r:vendor_iop_prop:s0
vendor.iop.enable_prefetch_ofr u:object_r:vendor_iop_prop:s0
vendor.perf.gestureflingboost.enable u:object_r:vendor_scroll_prop:s0
vendor.qti.izat. u:object_r:location_prop:s0
vendor.qti.izat. u:object_r:vendor_location_prop:s0
vendor.usb. u:object_r:vendor_usb_prop:s0
persist.vendor.usb. u:object_r:vendor_usb_prop:s0
ro.vendor.dbg.coresight.cfg_file u:object_r:vendor_coresight_prop:s0
@ -100,50 +100,50 @@ vendor.wifi.ftmd. u:object_r:vendor_wifi_ftmd_prop:s0
# WIGIG
vendor.wigig. u:object_r:vendor_wigig_prop:s0
ctl.vendor.wigig_supplicant u:object_r:ctl_vendor_wigigsvc_prop:s0
ctl.vendor.wigig_hostapd u:object_r:ctl_vendor_wigigsvc_prop:s0
ctl.vendor.wigig_supplicant u:object_r:vendor_ctl_vendor_wigigsvc_prop:s0
ctl.vendor.wigig_hostapd u:object_r:vendor_ctl_vendor_wigigsvc_prop:s0
#HWUI Property
ro.vendor.hwui.texture_cache_size u:object_r:hwui_prop:s0
ro.vendor.hwui.texture_cache_size u:object_r:vendor_hwui_prop:s0
# ActivityManager tuning properties
ro.vendor.qti.sys.fw. u:object_r:vendor_am_prop:s0
# public_vendor_default_prop
ro.vendor.graphics.memory u:object_r:public_vendor_default_prop:s0
vendor.debug.egl.changepixelformat u:object_r:public_vendor_default_prop:s0
vendor.debug.prerotation.disable u:object_r:public_vendor_default_prop:s0
vendor.dump.gpu.output u:object_r:public_vendor_default_prop:s0
vendor.debug.egl.swapinterval u:object_r:public_vendor_default_prop:s0
vendor.debug.egl.profiler u:object_r:public_vendor_default_prop:s0
vendor.debug.rs. u:object_r:public_vendor_default_prop:s0
# vendor_public_vendor_default_prop
ro.vendor.graphics.memory u:object_r:vendor_public_vendor_default_prop:s0
vendor.debug.egl.changepixelformat u:object_r:vendor_public_vendor_default_prop:s0
vendor.debug.prerotation.disable u:object_r:vendor_public_vendor_default_prop:s0
vendor.dump.gpu.output u:object_r:vendor_public_vendor_default_prop:s0
vendor.debug.egl.swapinterval u:object_r:vendor_public_vendor_default_prop:s0
vendor.debug.egl.profiler u:object_r:vendor_public_vendor_default_prop:s0
vendor.debug.rs. u:object_r:vendor_public_vendor_default_prop:s0
# cgroup follow
ro.vendor.qti.cgroup_follow.enable u:object_r:vendor_cgroup_follow_prop:s0
ro.vendor.qti.cgroup_follow.dex2oat_only u:object_r:vendor_cgroup_follow_prop:s0
#Bservice Property
ro.vendor.qti.sys.fw.bservice_ u:object_r:bservice_prop:s0
ro.vendor.qti.sys.fw.bservice_ u:object_r:vendor_bservice_prop:s0
#Delayed Service Restart Property
ro.vendor.qti.am.reschedule_service u:object_r:reschedule_service_prop:s0
persist.vendor.graphics.vulkan.disable u:object_r:graphics_vulkan_prop:s0
ro.vendor.qti.am.reschedule_service u:object_r:vendor_reschedule_service_prop:s0
persist.vendor.graphics.vulkan.disable u:object_r:vendor_graphics_vulkan_prop:s0
#boot mode property
vendor.sys.boot_mode u:object_r:vendor_boot_mode_prop:s0
# GPU
ro.vendor.gpu.available_frequencies u:object_r:freq_prop:s0
ro.vendor.gpu.available_frequencies u:object_r:vendor_freq_prop:s0
# NFC
vendor.qti.nfc. u:object_r:nfc_nq_prop:s0
vendor.qti.nfc. u:object_r:vendor_nfc_nq_prop:s0
# LKCore start
ctl.vendor.LKCore-dbg u:object_r:ctl_LKCore_prop:s0
ctl.vendor.LKCore-rel u:object_r:ctl_LKCore_prop:s0
ctl.vendor.LKCore-dbg u:object_r:vendor_ctl_LKCore_prop:s0
ctl.vendor.LKCore-rel u:object_r:vendor_ctl_LKCore_prop:s0
vendor.rild.libpath u:object_r:vendor_rild_libpath_prop:s0
# Peripheral Manager
vendor.peripheral. u:object_r:vendor_per_mgr_state_prop:s0
# HBTP
ctl.vendor.hbtp u:object_r:ctl_vendor_hbtp_prop:s0
ctl.vendor.hbtp u:object_r:vendor_ctl_vendor_hbtp_prop:s0
# factory properties
ctl.vendor.mmid u:object_r:ctl_vendor_mmid_prop:s0
ctl.vendor.mmid u:object_r:vendor_ctl_vendor_mmid_prop:s0
# qcc property
vendor.qti.qdma. u:object_r:vendor_qcc_prop:s0
@ -151,7 +151,7 @@ vendor.qti.qdma. u:object_r:vendor_qcc_prop:s0
#Needed by qsee need to rename this
vendor.sys.listeners.registered u:object_r:vendor_tee_listener_prop:s0
ctl.vendor.imsrcsservice u:object_r:ctl_vendor_imsrcsservice_prop:s0
ctl.vendor.imsrcsservice u:object_r:vendor_ctl_vendor_imsrcsservice_prop:s0
persist.vendor.mmi. u:object_r:vendor_mmi_prop:s0
@ -182,7 +182,7 @@ vendor.media.target.version u:object_r:vendor_video_prop:s0
vendor.video.disable.ubwc u:object_r:vendor_video_prop:s0
#rmt_storage
ctl.vendor.rmt_storage u:object_r:ctl_vendor_rmt_storage_prop:s0
ctl.vendor.rmt_storage u:object_r:vendor_ctl_vendor_rmt_storage_prop:s0
#GPU Available frequencies
vendor.gpu.available_frequencies u:object_r:vendor_gpu_prop:s0
@ -194,27 +194,27 @@ persist.vendor.data.perf_ko_load u:object_r:vendor_data_ko_prop:s0
persist.vendor.cap_configstore_debug u:object_r:vendor_cap_configstore_dbg_prop:s0
#hvdcp_opti
persist.vendor.bms u:object_r:hvdcp_opti_prop:s0
persist.vendor.chg u:object_r:hvdcp_opti_prop:s0
persist.vendor.chg_plcy_mgr u:object_r:hvdcp_opti_prop:s0
persist.vendor.cp u:object_r:hvdcp_opti_prop:s0
persist.vendor.ctm u:object_r:hvdcp_opti_prop:s0
persist.vendor.hvdcp2 u:object_r:hvdcp_opti_prop:s0
persist.vendor.hvdcp_opti u:object_r:hvdcp_opti_prop:s0
persist.vendor.hvdcp u:object_r:hvdcp_opti_prop:s0
persist.vendor.pps u:object_r:hvdcp_opti_prop:s0
persist.vendor.std-pd u:object_r:hvdcp_opti_prop:s0
persist.vendor.tb u:object_r:hvdcp_opti_prop:s0
persist.vendor.vin u:object_r:hvdcp_opti_prop:s0
persist.vendor.qg u:object_r:hvdcp_opti_prop:s0
persist.vendor.soh u:object_r:hvdcp_opti_prop:s0
persist.vendor.bms u:object_r:vendor_hvdcp_opti_prop:s0
persist.vendor.chg u:object_r:vendor_hvdcp_opti_prop:s0
persist.vendor.chg_plcy_mgr u:object_r:vendor_hvdcp_opti_prop:s0
persist.vendor.cp u:object_r:vendor_hvdcp_opti_prop:s0
persist.vendor.ctm u:object_r:vendor_hvdcp_opti_prop:s0
persist.vendor.hvdcp2 u:object_r:vendor_hvdcp_opti_prop:s0
persist.vendor.hvdcp_opti u:object_r:vendor_hvdcp_opti_prop:s0
persist.vendor.hvdcp u:object_r:vendor_hvdcp_opti_prop:s0
persist.vendor.pps u:object_r:vendor_hvdcp_opti_prop:s0
persist.vendor.std-pd u:object_r:vendor_hvdcp_opti_prop:s0
persist.vendor.tb u:object_r:vendor_hvdcp_opti_prop:s0
persist.vendor.vin u:object_r:vendor_hvdcp_opti_prop:s0
persist.vendor.qg u:object_r:vendor_hvdcp_opti_prop:s0
persist.vendor.soh u:object_r:vendor_hvdcp_opti_prop:s0
#adsprpc
vendor.fastrpc. u:object_r:adsprpc_prop:s0
vendor.fastrpc. u:object_r:vendor_adsprpc_prop:s0
#qvr properties
vendor.qvr u:object_r:qvr_prop:s0
vendor.qvr u:object_r:vendor_qvr_prop:s0
#bt lazyhal property
ro.vendor.bt.enablelazyhal u:object_r:bluetooth_prop:s0 exact bool
ro.vendor.bt.enablelazyhal u:object_r:vendor_bluetooth_prop:s0 exact bool
vendor.dcvs.prop u:object_r:vendor_dcvs_prop:s0

2
legacy/vendor/common/qtelephony.te vendored
View file

@ -26,7 +26,7 @@
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
get_prop(vendor_qtelephony, vendor_radio_prop)
get_prop(vendor_qtelephony, qcom_ims_prop)
get_prop(vendor_qtelephony, vendor_qcom_ims_prop)
get_prop(vendor_qtelephony, vendor_persist_camera_prop)
get_prop(vendor_qtelephony, vendor_audio_prop)
get_prop(vendor_qtelephony, vendor_video_prop)

4
legacy/vendor/common/qti_logkit_app.te vendored
View file

@ -31,8 +31,8 @@ app_domain(qti_logkit_app)
binder_use(qti_logkit_app)
# allow set prop to start lkcore
set_prop(qti_logkit_app, ctl_LKCore_prop)
set_prop(qti_logkit_app, fm_prop)
set_prop(qti_logkit_app, vendor_ctl_LKCore_prop)
set_prop(qti_logkit_app, vendor_fm_prop)
allow qti_logkit_app app_api_service:service_manager find;
allow qti_logkit_app surfaceflinger_service:service_manager find;

2
legacy/vendor/common/qtidataservices_app.te vendored
View file

@ -31,7 +31,7 @@ app_domain(qtidataservices_app);
add_hwservice(qtidataservices_app, hal_cacert_hwservice)
hwbinder_use(qtidataservices_app)
get_prop(qtidataservices_app, cnd_vendor_prop)
get_prop(qtidataservices_app, vendor_cnd_vendor_prop)
set_prop(qtidataservices_app, exported_radio_prop)
allow qtidataservices_app { app_api_service activity_service }:service_manager find;

2
legacy/vendor/common/qvrd.te vendored
View file

@ -40,7 +40,7 @@ r_dir_file(vendor_qvrd, sysfs_kgsl)
# Allow access to ADSP & SLPI
allow vendor_qvrd { ion_device qdsp_device dsp_device xdsp_device }:chr_file r_file_perms;
get_prop(vendor_qvrd, adsprpc_prop)
get_prop(vendor_qvrd, vendor_adsprpc_prop)
#
# Display

2
legacy/vendor/common/rmt_storage.te vendored
View file

@ -47,7 +47,7 @@ allow rmt_storage self:capability {
setpcap
};
set_prop(rmt_storage, ctl_vendor_rmt_storage_prop)
set_prop(rmt_storage, vendor_ctl_vendor_rmt_storage_prop)
#For Wakelocks
wakelock_use(rmt_storage)

2
legacy/vendor/common/sec_nvm.te vendored
View file

@ -53,5 +53,5 @@ allow sec_nvm persist_secnvm_file:file create_file_perms;
allow sec_nvm ion_device:chr_file rw_file_perms;
# Allow set/get prop to set/check if app is loaded
set_prop(sec_nvm, spcomlib_prop)
set_prop(sec_nvm, vendor_spcomlib_prop)
allow sec_nvm sysfs_data:file r_file_perms;

6
legacy/vendor/common/sensors.te vendored
View file

@ -106,9 +106,9 @@ allow sensors xdsp_device:chr_file r_file_perms;
# For reading dir/files on /dsp
r_dir_file(sensors, adsprpcd_file)
# For reading adsprpc_prop
get_prop(sensors, adsprpc_prop)
# For reading vendor_adsprpc_prop
get_prop(sensors, vendor_adsprpc_prop)
#allow access for sensors_vendor_data_file partition for ODL
allow sensors sensors_vendor_data_file:dir create_dir_perms;
allow sensors sensors_vendor_data_file:file create_file_perms;
allow sensors sensors_vendor_data_file:file create_file_perms;

2
legacy/vendor/common/spdaemon.te vendored
View file

@ -60,6 +60,6 @@ r_dir_file(spdaemon, firmware_file);
use_vendor_per_mgr(spdaemon)
# Allow set/get prop to set/check if app is loaded
set_prop(spdaemon, spcomlib_prop)
set_prop(spdaemon, vendor_spcomlib_prop)
allow spdaemon sysfs_data:file r_file_perms;

2
legacy/vendor/common/system_app.te vendored
View file

@ -159,7 +159,7 @@ hal_client_domain(system_app, hal_perf)
#allow system app to interact with the esepowermanager
hal_client_domain(system_app, hal_esepowermanager)
get_prop(system_app, fm_prop)
get_prop(system_app, vendor_fm_prop)
#allow system_app access factory
hal_client_domain(system_app, vendor_hal_factory_qti);

6
legacy/vendor/common/system_server.te vendored
View file

@ -136,9 +136,9 @@ allow system_server { vendor_location_app system_app } :file write;
get_prop(system_server, vendor_opengles_prop)
#get_prop(system_server, qemu_hw_mainkeys_prop)
get_prop(system_server, hwui_prop)
get_prop(system_server, bservice_prop)
get_prop(system_server, reschedule_service_prop)
get_prop(system_server, vendor_hwui_prop)
get_prop(system_server, vendor_bservice_prop)
get_prop(system_server, vendor_reschedule_service_prop)
allow system_server appdomain:file w_file_perms;
get_prop(system_server, vendor_cgroup_follow_prop)

8
legacy/vendor/common/vendor_init.te vendored
View file

@ -88,11 +88,11 @@ set_prop(vendor_init, vendor_rild_libpath_prop)
#Blocked by neverallow vendor_init { file_type fs_type }:file execute_no_trans;
#allow vendor_init vendor_toolbox_exec:file rx_file_perms;
set_prop(vendor_init, cnd_vendor_prop)
set_prop(vendor_init, vendor_cnd_vendor_prop)
#Access vendor gpu freq properties
set_prop(vendor_init, vendor_gpu_prop)
set_prop(vendor_init, public_vendor_default_prop)
set_prop(vendor_init, vendor_public_vendor_default_prop)
#allow vendor GPU property
set_prop(vendor_init, vendor_opengles_prop)
@ -101,7 +101,7 @@ get_prop(vendor_init, vendor_video_prop)
set_prop(vendor_init, vendor_sys_video_prop)
#Acess vendor hvdcp properties
set_prop(vendor_init, hvdcp_opti_prop)
set_prop(vendor_init, vendor_hvdcp_opti_prop)
# Allow timezone to be overrided by vendor
set_prop(vendor_init, exported_system_prop)
@ -110,7 +110,7 @@ set_prop(vendor_init, exported_system_prop)
set_prop(vendor_init, vendor_bluetooth_prop)
# Access vendor sensor properties
set_prop(vendor_init, sensors_prop)
set_prop(vendor_init, vendor_sensors_prop)
set_prop(vendor_init, vendor_dcvs_prop)

2
legacy/vendor/common/vppservice.te vendored
View file

@ -41,7 +41,7 @@ binder_call(hal_vpp_server, hal_vpp_client)
# allow vppservice to access adsprpcd
r_dir_file(vendor_vppservice, adsprpcd_file);
get_prop(vendor_vppservice, adsprpc_prop)
get_prop(vendor_vppservice, vendor_adsprpc_prop)
r_dir_file(vendor_vppservice, firmware_file);
#allow access to vppservice (/data/vendor/vpp)

2
legacy/vendor/common/wigighalsvc.te vendored
View file

@ -42,7 +42,7 @@ allow hal_wigig_client hal_wigig_hwservice:hwservice_manager find;
add_hwservice(hal_wigig, hal_wigig_hwservice)
# allow start/stop services via ctl.start and ctl.stop
set_prop(hal_wigig, ctl_vendor_wigigsvc_prop)
set_prop(hal_wigig, vendor_ctl_vendor_wigigsvc_prop)
# access wigig properties
# need to write vendor.wigig.driver/read vendor.wigig.driver.probed

2
legacy/vendor/sdm660/vendor_init.te vendored
View file

@ -25,6 +25,6 @@
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
allow vendor_init freq_prop:property_service set;
allow vendor_init vendor_freq_prop:property_service set;
set_prop(vendor_init, vendor_video_prop);

2
legacy/vendor/test/property.te vendored
View file

@ -24,5 +24,5 @@
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
type sensors_dbg_prop, property_type;
type vendor_sensors_dbg_prop, property_type;

2
legacy/vendor/test/property_contexts vendored
View file

@ -24,5 +24,5 @@
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
persist.vendor.debug.sensors. u:object_r:sensors_dbg_prop:s0
persist.vendor.debug.sensors. u:object_r:vendor_sensors_dbg_prop:s0

2
legacy/vendor/test/vtloopback_app.te vendored
View file

@ -35,6 +35,6 @@ binder_call(vtloopback_app, hal_imsrtp)
allow vtloopback_app hal_imsrtp_hwservice:hwservice_manager find;
allow vtloopback_app cameraserver_service:service_manager find;
allow vtloopback_app mediaserver_service:service_manager find;
get_prop(vtloopback_app, qcom_ims_prop)
get_prop(vtloopback_app, vendor_qcom_ims_prop)
allow vtloopback_app { app_api_service activity_service }:service_manager find;
')