diff --git a/legacy/vendor/common/charger.te b/legacy/vendor/common/charger.te new file mode 100644 index 00000000..b6fc4cdb --- /dev/null +++ b/legacy/vendor/common/charger.te @@ -0,0 +1,37 @@ +# Copyright (c) 2019, The Linux Foundation. All rights reserved. +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions are +# met: +# * Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# * Redistributions in binary form must reproduce the above +# copyright notice, this list of conditions and the following +# disclaimer in the documentation and/or other materials provided +# with the distribution. +# * Neither the name of The Linux Foundation nor the names of its +# contributors may be used to endorse or promote products derived +# from this software without specific prior written permission. +# +# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED +# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF +# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT +# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS +# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR +# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF +# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR +# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, +# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE +# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN +# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. +allow charger self:capability2 wake_alarm; +r_dir_file(charger, sysfs_battery_supply) +r_dir_file(charger, sysfs_usb_supply) + +allow charger { + sysfs_battery_supply + sysfs_usb_supply +}:file w_file_perms; + +dontaudit charger device:dir r_dir_perms; +dontaudit charger self:capability sys_admin; diff --git a/legacy/vendor/common/hvdcp.te b/legacy/vendor/common/hvdcp.te index d00cbc8b..e61855d2 100644 --- a/legacy/vendor/common/hvdcp.te +++ b/legacy/vendor/common/hvdcp.te @@ -71,6 +71,6 @@ allow hvdcp mnt_vendor_file:dir search; allow hvdcp persist_hvdcp_file:dir rw_dir_perms; allow hvdcp persist_hvdcp_file:file create_file_perms; -get_prop(hvdcp, hvdcp_opti_prop) +set_prop(hvdcp, hvdcp_opti_prop) wakelock_use(hvdcp) diff --git a/legacy/vendor/common/init_shell.te b/legacy/vendor/common/init_shell.te index 602e53c2..fb429ffb 100644 --- a/legacy/vendor/common/init_shell.te +++ b/legacy/vendor/common/init_shell.te @@ -234,15 +234,18 @@ allow qti_init_shell fm_qsoc_patches_exec:file rx_file_perms; allow qti_init_shell { sysfs_battery_supply sysfs_usb_supply + sysfs_usbpd_device }:dir r_dir_perms; allow qti_init_shell { sysfs_battery_supply sysfs_usb_supply + sysfs_usbpd_device }:file rw_file_perms; allow qti_init_shell sysfs_battery_supply:file setattr; allow qti_init_shell sysfs_usb_supply:file setattr; +allow qti_init_shell sysfs_usbpd_device:file setattr; allow qti_init_shell sysfs_fm:file rw_file_perms; diff --git a/legacy/vendor/sdm710/file_contexts b/legacy/vendor/sdm710/file_contexts index 01edd1d4..1bb3d91e 100644 --- a/legacy/vendor/sdm710/file_contexts +++ b/legacy/vendor/sdm710/file_contexts @@ -154,6 +154,7 @@ # FBE /(vendor|system/vendor)/bin/init.qti.qseecomd.sh u:object_r:init-qti-fbe-sh_exec:s0 +/vendor/bin/init.qti.chg_policy.sh u:object_r:qti_init_shell_exec:s0 ################################## # same process HAL libs /vendor/lib(64)?/hw/gralloc\.sdm710\.so u:object_r:same_process_hal_file:s0 diff --git a/legacy/vendor/sdm845/file_contexts b/legacy/vendor/sdm845/file_contexts index c48e6f2d..976d033f 100644 --- a/legacy/vendor/sdm845/file_contexts +++ b/legacy/vendor/sdm845/file_contexts @@ -95,6 +95,8 @@ # FBE /(vendor|system/vendor)/bin/init.qti.qseecomd.sh u:object_r:init-qti-fbe-sh_exec:s0 +/vendor/bin/init.qti.chg_policy.sh u:object_r:qti_init_shell_exec:s0 + # Same process file /vendor/lib(64)?/hw/gralloc\.sdm845\.so u:object_r:same_process_hal_file:s0 /vendor/lib(64)?/hw/vulkan\.sdm845\.so u:object_r:same_process_hal_file:s0