tequilaOS/platform_device_qcom_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

sepolicy: Add permissions for feature_enabler_client

Browse source 
1. Allow read permission to /mnt/vendor/persist/data/*
2. Binder access for featenab_client.service

Change-Id: I2fcc6e34c5c208c41fcff5ab526a420210a9204c
This commit is contained in:
Ramkumar Radhakrishnan 2019-07-18 16:14:10 -07:00 committed by Gerrit - the friendly Code Review server
parent 727a9141ca
commit bb5d305386
3 changed files with 13 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
generic/vendor/common/feature_enabler_client.te vendored
View file

@ -33,6 +33,14 @@ allow feature_enabler_client tee_device:chr_file rw_file_perms;
allow feature_enabler_client ion_device:chr_file rw_file_perms;
unix_socket_connect(feature_enabler_client , ssgtzd, ssgtzd)
# Allow read permission to /mnt/vendor/persist/feature_enabler_client/*
allow feature_enabler_client mnt_vendor_file:dir search;
allow feature_enabler_client persist_feature_enabler_file:dir r_dir_perms;
allow feature_enabler_client persist_feature_enabler_file:file r_file_perms;
r_dir_file(feature_enabler_client, persist_feature_enabler_file)
# Allow read permission to /mnt/vendor/persist/data/*
r_dir_file(feature_enabler_client, persist_data_file)
# Binder access for featenab_client.service
vndbinder_use(feature_enabler_client)
allow feature_enabler_client qfeatenab_client_service:service_manager { add find };

3
generic/vendor/common/vndservice.te vendored
View file

@ -25,4 +25,5 @@
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
type qdisplay_service, vndservice_manager_type;
type vendor_per_mgr_service, vndservice_manager_type;
type vendor_per_mgr_service, vndservice_manager_type;
type qfeatenab_client_service, vndservice_manager_type;

1
generic/vendor/common/vndservice_contexts vendored
View file

@ -25,4 +25,5 @@
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
display.qservice u:object_r:qdisplay_service:s0
featenab_client.service u:object_r:qfeatenab_client_service:s0
vendor.qcom.PeripheralManager u:object_r:vendor_per_mgr_service:s0