tequilaOS/platform_device_qcom_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

sepolicy: Add policy for USB HAL

Browse source 
Add rules for hal_usb_qti service, which is part of hal_usb
and hal_usb_gadget domains defined by system policy. Grant
access to needed properties and files.

Change-Id: I1e03ad1e63f5c70788f04e52833f6d09cc76eca8
This commit is contained in:
Jack Pham 2019-05-01 16:22:19 -07:00
parent 3233102de8
commit f9bd0b096a
3 changed files with 44 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
generic/vendor/common/property_contexts vendored
View file

@ -62,9 +62,10 @@ persist.vendor.data.dont_use_npflag u:object_r:vendor_dataqdp_prop:s0
persist.vendor.data.profile_update u:object_r:vendor_dataqdp_prop:s0
vendor.sys.listeners.registered u:object_r:vendor_tee_listener_prop:s0
vendor.sys.modem.diag. u:object_r:vendor_modem_diag_prop:s0
vendor.display. u:object_r:vendor_display_prop:s0
vendor.usb. u:object_r:vendor_usb_prop:s0
persist.vendor.usb. u:object_r:vendor_usb_prop:s0
ro.vendor.usb. u:object_r:vendor_usb_prop:s0
vendor.display. u:object_r:vendor_display_prop:s0
ro.vendor.display. u:object_r:vendor_display_prop:s0
persist.vendor.display. u:object_r:vendor_display_prop:s0
vendor.gralloc. u:object_r:vendor_gralloc_prop:s0

1
qva/vendor/common/file_contexts vendored
View file

@ -106,6 +106,7 @@
/(vendor|system/vendor)/bin/fstman u:object_r:fstman_exec:s0
/(vendor|system/vendor)/bin/wigighalsvc u:object_r:wigighalsvc_exec:s0
/(vendor|system/vendor)/bin/wigignpt u:object_r:wigignpt_exec:s0
/vendor/bin/hw/android\.hardware\.usb\@1\.[0-2]-service-qti u:object_r:hal_usb_qti_exec:s0
#### Context for location features
## location daemons and binaries

41
qva/vendor/common/hal_usb.te vendored Normal file
View file

@ -0,0 +1,41 @@
# Copyright (c) 2019, The Linux Foundation. All rights reserved.
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are
# met:
# * Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
# * Redistributions in binary form must reproduce the above
# copyright notice, this list of conditions and the following
# disclaimer in the documentation and/or other materials provided
# with the distribution.
# * Neither the name of The Linux Foundation nor the names of its
# contributors may be used to endorse or promote products derived
# from this software without specific prior written permission.
#
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
type hal_usb_qti, domain;
hal_server_domain(hal_usb_qti, hal_usb_gadget)
hal_server_domain(hal_usb_qti, hal_usb)
type hal_usb_qti_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_usb_qti)
get_prop(hal_usb_qti, vendor_usb_prop)
set_prop(hal_usb_qti, vendor_usb_prop)
allow hal_usb_qti configfs:file create_file_perms;
allow hal_usb_qti sysfs_usb_c:dir r_dir_perms;
allow hal_usb_qti sysfs_usb_c:lnk_file r_file_perms;
allow hal_usb_qti sysfs_usb_c:file rw_file_perms;