sepolicy_vndr: Compilation fix for S upgrade
Change-Id: Ie41b7cc0bb91d5d92480fafa9d44bcbe8b855343
This commit is contained in:
parent
9021b7aa45
commit
c61c806e02
6 changed files with 87 additions and 88 deletions
3
legacy/vendor/common/location_app.te
vendored
3
legacy/vendor/common/location_app.te
vendored
|
@ -26,7 +26,6 @@
|
||||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||||
|
|
||||||
hal_client_domain(vendor_location_app, hal_perf)
|
hal_client_domain(vendor_location_app, hal_perf)
|
||||||
qmux_socket(vendor_location_app)
|
|
||||||
|
|
||||||
#Permissions for JDWP
|
#Permissions for JDWP
|
||||||
userdebug_or_eng(`
|
userdebug_or_eng(`
|
||||||
|
@ -54,4 +53,4 @@ allow vendor_location_app radio_service:service_manager find;
|
||||||
allowxperm vendor_location_app self:socket ioctl msm_sock_ipc_ioctls;
|
allowxperm vendor_location_app self:socket ioctl msm_sock_ipc_ioctls;
|
||||||
allow vendor_location_app self:qipcrtr_socket create_socket_perms_no_ioctl;
|
allow vendor_location_app self:qipcrtr_socket create_socket_perms_no_ioctl;
|
||||||
allow vendor_location_app sysfs_data:file r_file_perms;
|
allow vendor_location_app sysfs_data:file r_file_perms;
|
||||||
unix_socket_connect(vendor_location_app, vendor_dpmtcm, vendor_dpmd)
|
unix_socket_connect(vendor_location_app, vendor_dpmtcm, vendor_dpmd)
|
||||||
|
|
152
legacy/vendor/common/property.te
vendored
152
legacy/vendor/common/property.te
vendored
|
@ -26,160 +26,160 @@
|
||||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||||
|
|
||||||
# property for uicc_daemon
|
# property for uicc_daemon
|
||||||
type qcom_ims_prop, property_type;
|
vendor_restricted_prop(qcom_ims_prop)
|
||||||
type ctl_vendor_qmuxd_prop, property_type;
|
vendor_internal_prop(ctl_vendor_qmuxd_prop)
|
||||||
type ctl_vendor_netmgrd_prop, property_type;
|
vendor_internal_prop(ctl_vendor_netmgrd_prop)
|
||||||
type ctl_vendor_port-bridge_prop, property_type;
|
vendor_internal_prop(ctl_vendor_port-bridge_prop)
|
||||||
type ctl_qcrild_prop, property_type;
|
vendor_internal_prop(ctl_qcrild_prop)
|
||||||
type vendor_tee_listener_prop, property_type;
|
vendor_restricted_prop(vendor_tee_listener_prop)
|
||||||
type ctl_vendor_rild_prop, property_type;
|
vendor_internal_prop(ctl_vendor_rild_prop)
|
||||||
|
|
||||||
# property for LKCore ctl start
|
# property for LKCore ctl start
|
||||||
type ctl_LKCore_prop, property_type;
|
vendor_restricted_prop(ctl_LKCore_prop)
|
||||||
|
|
||||||
type freq_prop, property_type;
|
vendor_internal_prop(freq_prop)
|
||||||
type vendor_vm_bms_prop, property_type; #To start vm_bms
|
vendor_internal_prop(vendor_vm_bms_prop) #To start vm_bms
|
||||||
type vendor_dataqti_prop, property_type;
|
vendor_internal_prop(vendor_dataqti_prop)
|
||||||
type vendor_dataadpl_prop, property_type;
|
vendor_internal_prop(vendor_dataadpl_prop)
|
||||||
type vendor_dataqdp_prop, property_type;
|
vendor_internal_prop(vendor_dataqdp_prop)
|
||||||
type vendor_ipacm_prop, property_type;
|
vendor_internal_prop(vendor_ipacm_prop)
|
||||||
type vendor_ipacm-diag_prop, property_type;
|
vendor_internal_prop(vendor_ipacm-diag_prop)
|
||||||
type cnd_vendor_prop, property_type;
|
vendor_restricted_prop(cnd_vendor_prop)
|
||||||
type sensors_prop, property_type;
|
vendor_internal_prop(sensors_prop)
|
||||||
type slpi_prop, property_type;
|
vendor_restricted_prop(slpi_prop)
|
||||||
type vendor_msm_irqbalance_prop, property_type;
|
vendor_internal_prop(vendor_msm_irqbalance_prop)
|
||||||
type vendor_msm_irqbl_sdm630_prop, property_type;
|
vendor_internal_prop(vendor_msm_irqbl_sdm630_prop)
|
||||||
type camera_prop, property_type;
|
vendor_restricted_prop(camera_prop)
|
||||||
type spcomlib_prop, property_type;
|
vendor_internal_prop(spcomlib_prop)
|
||||||
type vendor_display_prop, property_type;
|
vendor_restricted_prop(vendor_display_prop)
|
||||||
type scr_enabled_prop, property_type;
|
vendor_restricted_prop(scr_enabled_prop)
|
||||||
type bg_daemon_prop, property_type;
|
vendor_restricted_prop(bg_daemon_prop)
|
||||||
type bg_boot_complete_prop, property_type;
|
vendor_restricted_prop(bg_boot_complete_prop)
|
||||||
type vendor_opengles_prop, property_type;
|
vendor_restricted_prop(vendor_opengles_prop)
|
||||||
type vendor_mdm_helper_prop, property_type;
|
vendor_internal_prop(vendor_mdm_helper_prop)
|
||||||
type vendor_mpctl_prop, property_type;
|
vendor_restricted_prop(vendor_mpctl_prop)
|
||||||
type vendor_iop_prop, property_type;
|
vendor_restricted_prop(vendor_iop_prop)
|
||||||
type public_vendor_default_prop, property_type;
|
vendor_restricted_prop(public_vendor_default_prop)
|
||||||
#Scroll Pre-obtain
|
#Scroll Pre-obtain
|
||||||
type vendor_scroll_prop, property_type;
|
vendor_restricted_prop(vendor_scroll_prop)
|
||||||
|
|
||||||
# properties for ActivityManager tuning
|
# properties for ActivityManager tuning
|
||||||
type vendor_am_prop, property_type;
|
vendor_restricted_prop(vendor_am_prop)
|
||||||
|
|
||||||
#Needed for ubwc support
|
#Needed for ubwc support
|
||||||
type vendor_gralloc_prop, property_type;
|
vendor_restricted_prop(vendor_gralloc_prop)
|
||||||
|
|
||||||
type fm_prop, property_type;
|
vendor_restricted_prop(fm_prop)
|
||||||
type chgdiabled_prop, property_type;
|
vendor_restricted_prop(chgdiabled_prop)
|
||||||
|
|
||||||
vendor_restricted_prop(vendor_xlat_prop);
|
vendor_restricted_prop(vendor_xlat_prop);
|
||||||
|
|
||||||
# property for location
|
# property for location
|
||||||
type location_prop, property_type;
|
vendor_internal_prop(location_prop)
|
||||||
|
|
||||||
#properites for init.qcom.sh script
|
#properites for init.qcom.sh script
|
||||||
type vendor_usb_prop, property_type;
|
vendor_internal_prop(vendor_usb_prop)
|
||||||
|
|
||||||
type vendor_coresight_prop, property_type;
|
vendor_restricted_prop(vendor_coresight_prop)
|
||||||
|
|
||||||
|
|
||||||
type vendor_alarm_boot_prop, property_type;
|
vendor_restricted_prop(vendor_alarm_boot_prop)
|
||||||
|
|
||||||
|
|
||||||
type vendor_wifi_ftmd_prop, property_type;
|
vendor_restricted_prop(vendor_wifi_ftmd_prop)
|
||||||
|
|
||||||
# WIGIG
|
# WIGIG
|
||||||
type vendor_wigig_prop, property_type;
|
vendor_internal_prop(vendor_wigig_prop)
|
||||||
type ctl_vendor_wigigsvc_prop, property_type;
|
vendor_internal_prop(ctl_vendor_wigigsvc_prop)
|
||||||
|
|
||||||
#HWUI property
|
#HWUI property
|
||||||
type hwui_prop, property_type;
|
vendor_restricted_prop(hwui_prop)
|
||||||
|
|
||||||
type graphics_vulkan_prop, property_type;
|
vendor_restricted_prop(graphics_vulkan_prop)
|
||||||
|
|
||||||
#cgroup follow
|
#cgroup follow
|
||||||
type vendor_cgroup_follow_prop, property_type;
|
vendor_restricted_prop(vendor_cgroup_follow_prop)
|
||||||
|
|
||||||
#Bservice property
|
#Bservice property
|
||||||
type bservice_prop, property_type;
|
vendor_restricted_prop(bservice_prop)
|
||||||
|
|
||||||
#Delayed Service Reschedule property
|
#Delayed Service Reschedule property
|
||||||
type reschedule_service_prop, property_type;
|
vendor_restricted_prop(reschedule_service_prop)
|
||||||
|
|
||||||
#boot mode property
|
#boot mode property
|
||||||
type vendor_boot_mode_prop, property_type;
|
vendor_internal_prop(vendor_boot_mode_prop)
|
||||||
#properties for nfc
|
#properties for nfc
|
||||||
type nfc_nq_prop, property_type;
|
vendor_restricted_prop(nfc_nq_prop)
|
||||||
|
|
||||||
type vendor_rild_libpath_prop, property_type;
|
vendor_internal_prop(vendor_rild_libpath_prop)
|
||||||
|
|
||||||
#Peripheral manager
|
#Peripheral manager
|
||||||
type vendor_per_mgr_state_prop, property_type;
|
vendor_restricted_prop(vendor_per_mgr_state_prop)
|
||||||
|
|
||||||
type vendor_system_prop, property_type;
|
vendor_internal_prop(vendor_system_prop)
|
||||||
|
|
||||||
# Bluetooth props
|
# Bluetooth props
|
||||||
type vendor_bluetooth_prop, property_type;
|
vendor_restricted_prop(vendor_bluetooth_prop)
|
||||||
|
|
||||||
# HBTP
|
# HBTP
|
||||||
type ctl_vendor_hbtp_prop, property_type;
|
vendor_internal_prop(ctl_vendor_hbtp_prop)
|
||||||
|
|
||||||
# factory properties
|
# factory properties
|
||||||
type ctl_vendor_mmid_prop, property_type;
|
vendor_internal_prop(ctl_vendor_mmid_prop)
|
||||||
|
|
||||||
#qcc property
|
#qcc property
|
||||||
#type vendor_qdma_prop, property_type;
|
#vendor_internal_prop(vendor_qdma_prop)
|
||||||
vendor_public_prop(vendor_qcc_prop);
|
vendor_public_prop(vendor_qcc_prop);
|
||||||
|
|
||||||
#imsrcsservice
|
#imsrcsservice
|
||||||
type ctl_vendor_imsrcsservice_prop, property_type;
|
vendor_restricted_prop(ctl_vendor_imsrcsservice_prop)
|
||||||
|
|
||||||
#mmi
|
#mmi
|
||||||
type vendor_mmi_prop, property_type;
|
vendor_internal_prop(vendor_mmi_prop)
|
||||||
|
|
||||||
#time service
|
#time service
|
||||||
type vendor_time_service_prop, property_type;
|
vendor_internal_prop(vendor_time_service_prop)
|
||||||
type vendor_radio_prop, property_type;
|
vendor_restricted_prop(vendor_radio_prop)
|
||||||
|
|
||||||
# Audio props
|
# Audio props
|
||||||
type vendor_audio_prop, property_type;
|
vendor_restricted_prop(vendor_audio_prop)
|
||||||
|
|
||||||
# Audio debug props
|
# Audio debug props
|
||||||
type vendor_audio_debug_prop, property_type;
|
vendor_internal_prop(vendor_audio_debug_prop)
|
||||||
|
|
||||||
#ss-restart
|
#ss-restart
|
||||||
type vendor_ssr_prop, property_type;
|
vendor_internal_prop(vendor_ssr_prop)
|
||||||
|
|
||||||
#ss-services (PD)
|
#ss-services (PD)
|
||||||
type vendor_pd_locater_dbg_prop, property_type;
|
vendor_internal_prop(vendor_pd_locater_dbg_prop)
|
||||||
|
|
||||||
#qdcmss property
|
#qdcmss property
|
||||||
type vendor_qdcmss_prop, property_type;
|
vendor_internal_prop(vendor_qdcmss_prop)
|
||||||
|
|
||||||
# Wifi Softap
|
# Wifi Softap
|
||||||
type vendor_softap_prop, property_type;
|
vendor_restricted_prop(vendor_softap_prop)
|
||||||
|
|
||||||
#mm-video
|
#mm-video
|
||||||
type vendor_video_prop, property_type;
|
vendor_restricted_prop(vendor_video_prop)
|
||||||
|
|
||||||
#qtccconnector
|
#qtccconnector
|
||||||
type vendor_qteeconnector_opti_prop, property_type;
|
vendor_internal_prop(vendor_qteeconnector_opti_prop)
|
||||||
|
|
||||||
|
|
||||||
#rmt_storage
|
#rmt_storage
|
||||||
type ctl_vendor_rmt_storage_prop, property_type;
|
vendor_internal_prop(ctl_vendor_rmt_storage_prop)
|
||||||
|
|
||||||
type vendor_gpu_prop, property_type;
|
vendor_restricted_prop(vendor_gpu_prop)
|
||||||
|
|
||||||
type vendor_data_ko_prop, property_type;
|
vendor_internal_prop(vendor_data_ko_prop)
|
||||||
|
|
||||||
#hvdcp_opti
|
#hvdcp_opti
|
||||||
type hvdcp_opti_prop, property_type;
|
vendor_internal_prop(hvdcp_opti_prop)
|
||||||
#adsprpc props
|
#adsprpc props
|
||||||
type adsprpc_prop, property_type;
|
vendor_restricted_prop(adsprpc_prop)
|
||||||
|
|
||||||
#qvr property
|
#qvr property
|
||||||
type qvr_prop, property_type;
|
vendor_restricted_prop(qvr_prop)
|
||||||
|
|
||||||
#capabilityconfigstore hal (CCHAL)
|
#capabilityconfigstore hal (CCHAL)
|
||||||
type vendor_cap_configstore_dbg_prop, property_type;
|
vendor_internal_prop(vendor_cap_configstore_dbg_prop)
|
||||||
|
|
4
legacy/vendor/common/qti_logkit_app.te
vendored
4
legacy/vendor/common/qti_logkit_app.te
vendored
|
@ -48,8 +48,8 @@ userdebug_or_eng(`
|
||||||
r_dir_file(qti_logkit_app, firmware_file);
|
r_dir_file(qti_logkit_app, firmware_file);
|
||||||
|
|
||||||
# Access to tombstone segfaults
|
# Access to tombstone segfaults
|
||||||
allow qti_logkit_app tombstone_data_file:dir r_dir_perms;
|
allow qti_logkit_app vendor_tombstone_data_file:dir r_dir_perms;
|
||||||
allow qti_logkit_app tombstone_data_file:file r_file_perms;
|
allow qti_logkit_app vendor_tombstone_data_file:file r_file_perms;
|
||||||
diag_use(qti_logkit_app)
|
diag_use(qti_logkit_app)
|
||||||
')
|
')
|
||||||
|
|
||||||
|
|
4
legacy/vendor/common/system_app.te
vendored
4
legacy/vendor/common/system_app.te
vendored
|
@ -38,8 +38,8 @@ userdebug_or_eng(`
|
||||||
allow system_app su:unix_dgram_socket sendto;
|
allow system_app su:unix_dgram_socket sendto;
|
||||||
|
|
||||||
# Access to tombstone segfaults
|
# Access to tombstone segfaults
|
||||||
allow system_app tombstone_data_file:dir r_dir_perms;
|
allow system_app vendor_tombstone_data_file:dir r_dir_perms;
|
||||||
allow system_app tombstone_data_file:file r_file_perms;
|
allow system_app vendor_tombstone_data_file:file r_file_perms;
|
||||||
diag_use(system_app)
|
diag_use(system_app)
|
||||||
|
|
||||||
')
|
')
|
||||||
|
|
6
legacy/vendor/test/property.te
vendored
6
legacy/vendor/test/property.te
vendored
|
@ -24,10 +24,10 @@
|
||||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||||
type sensors_dbg_prop, property_type;
|
vendor_restricted_prop(sensors_dbg_prop);
|
||||||
|
|
||||||
#WiFi Display
|
#WiFi Display
|
||||||
type wfd_vendor_debug_prop, property_type;
|
vendor_restricted_prop(wfd_vendor_debug_prop);
|
||||||
|
|
||||||
#debugutils HAL
|
#debugutils HAL
|
||||||
type vendor_dbg_brkpoint_prop, property_type;
|
vendor_restricted_prop(vendor_dbg_brkpoint_prop);
|
||||||
|
|
6
qva/vendor/test/property.te
vendored
6
qva/vendor/test/property.te
vendored
|
@ -27,6 +27,6 @@
|
||||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||||
|
|
||||||
#qspm hal debug
|
#qspm hal debug
|
||||||
type vendor_qspm_dbg_prop, property_type;
|
vendor_restricted_prop(vendor_qspm_dbg_prop);
|
||||||
type vendor_dbg_brkpoint_prop, property_type;
|
vendor_restricted_prop(vendor_dbg_brkpoint_prop);
|
||||||
type vendor_fda_prop, property_type;
|
vendor_restricted_prop(vendor_fda_prop);
|
||||||
|
|
Loading…
Reference in a new issue