Due to newrestriction priv_app can't access cgroup.
And priv_app is client of hal_perf, so had to remove it.
Change-Id: Idb17f438e06bdd71df235072eec4973556ce09d0
Add esoc node to sysfs_ssr type. This is required to allow subsystem
queries for targets with external modem.
Change-Id: Ib2f559e27770a5b113e77672554825904b5c707d
Add permissions needed for clients to use the
vendor framework detection library module. All
native clients using the framework detection
module must use the macro for their domain.
The existing permission needs are empty
(already part of domain) but added placeholder
to allow any underlying mechanism changes that
may require new permissions.
Change-Id: I88de640608e673a77a357afce11af8cb4d01e2d9
Add console labeling for JTAG console device. Debug builds only
as not expecting console via JTAG in a commercial configuration.
Fix generic/vendor/test policy pickup.
Change-Id: I03257ad59f7b4f41680da3942606dd40c147bcbf
sdd node was labeled as ssd_Device for some target but ssd_block_device for other.
So making it unique across all target.
Change-Id: I1248585c0c6ab33fbc9daaa8d0ab8d6299ec2fb8
domain.te already had given access to
r_dir_file({domain - isolated_app}, sysfs_soc);
r_dir_file({domain - isolated_app}, sysfs_esoc);
r_dir_file({domain - isolated_app}, sysfs_ssr);
r_dir_file({domain - isolated_app}, sysfs_thermal);
so removing all the duplicate rules covering this
Change-Id: Ic74a8c62a81567dbe5bfc69f691bc2239565ba5f
As part of new AOSP restriction all the domains which are working
from system partation should have "system_file_type" attribute
else will lead to compile time failure .
For reading / setting any property we should be using
following macros .
set_prop( domain, property_label)
get_prop( domain, property_label)
So addressing these as part of new requirments .
Change-Id: I6ef373404640f285a57484024665a42f615ce863
Adding the label to services/daemon which was not getting started due to
incorrect label and add the sepolicy rules to get the target to boot
in enfrocing mode.
Change-Id: I12fc4bfe38153cd51fb2d9b869f05a06c9d2c61f