tequilaOS/platform_device_qcom_sepolicy_vndr-sm8450
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge 9bbbddbefe on remote branch

Browse source 
Change-Id: I34bbb258b455b5ccf840288cac68ee341c20bfd0
This commit is contained in:
Linux Build Service Account 2023-03-06 08:58:08 -08:00
commit ae7068e465
3 changed files with 41 additions and 39 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
generic/vendor/common/genfs_contexts vendored
View file

@ -143,6 +143,7 @@ genfscon sysfs /devices/platform/soc/5e00000.qcom,mdss_mdp/drm/card0/sde-crtc-1/
genfscon sysfs /devices/platform/soc/5e00000.qcom,mdss_mdp/drm/card0/sde-crtc-2/retire_frame_event u:object_r:vendor_sysfs_graphics:s0 genfscon sysfs /devices/platform/soc/5e00000.qcom,mdss_mdp/drm/card0/sde-crtc-2/retire_frame_event u:object_r:vendor_sysfs_graphics:s0
genfscon sysfs /devices/platform/soc/a600000.ssusb/mode u:object_r:vendor_sysfs_usb_device:s0 genfscon sysfs /devices/platform/soc/a600000.ssusb/mode u:object_r:vendor_sysfs_usb_device:s0
genfscon sysfs /devices/platform/soc/a800000.ssusb/mode u:object_r:vendor_sysfs_usb_device:s0 genfscon sysfs /devices/platform/soc/a800000.ssusb/mode u:object_r:vendor_sysfs_usb_device:s0
genfscon sysfs /devices/platform/soc/4e00000.ssusb/mode u:object_r:vendor_sysfs_usb_device:s0
genfscon sysfs /devices/platform/hypervisor/hypervisor:qcom,gh-watchdog/wakeup_enable u:object_r:vendor_sysfs_wdog_device:s0 genfscon sysfs /devices/platform/hypervisor/hypervisor:qcom,gh-watchdog/wakeup_enable u:object_r:vendor_sysfs_wdog_device:s0

14
generic/vendor/test/nativehaltestservice.te vendored
View file

@ -38,17 +38,18 @@ init_daemon_domain(vendor_nativehaltestservice);
# ignore spurious denial # ignore spurious denial
dontaudit vendor_nativehaltestservice graphics_device:dir search; dontaudit vendor_nativehaltestservice graphics_device:dir search;
userdebug_or_eng(` # This is needed to get priority for Camera process
set_prop(vendor_nativehaltestservice, vendor_camera_prop) allow vendor_nativehaltestservice self:capability sys_nice;
unix_socket_connect(vendor_nativehaltestservice, vendor_thermal, vendor_thermal-engine)
allow vendor_nativehaltestservice vendor_diag_device:chr_file rw_file_perms; set_prop(vendor_nativehaltestservice, vendor_camera_prop)
allow vendor_nativehaltestservice vendor_camera_data_file:dir create_dir_perms; allow vendor_nativehaltestservice vendor_camera_data_file:dir create_dir_perms;
allow vendor_nativehaltestservice vendor_camera_data_file:file create_file_perms; allow vendor_nativehaltestservice vendor_camera_data_file:file create_file_perms;
unix_socket_connect(vendor_nativehaltestservice, vendor_thermal, vendor_thermal-engine)
# This is needed to get priority for Camera process userdebug_or_eng(`
allow vendor_nativehaltestservice self:capability sys_nice; allow vendor_nativehaltestservice vendor_diag_device:chr_file rw_file_perms;
')
# access hexagon # access hexagon
allow vendor_nativehaltestservice vendor_qdsp_device:chr_file r_file_perms; allow vendor_nativehaltestservice vendor_qdsp_device:chr_file r_file_perms;
@ -79,4 +80,3 @@ userdebug_or_eng(`
allow vendor_nativehaltestservice vendor_hal_perf_default:binder call; allow vendor_nativehaltestservice vendor_hal_perf_default:binder call;
allow vendor_nativehaltestservice vendor_hal_perf_hwservice:hwservice_manager find; allow vendor_nativehaltestservice vendor_hal_perf_hwservice:hwservice_manager find;
allow vendor_nativehaltestservice video_device:chr_file ioctl; allow vendor_nativehaltestservice video_device:chr_file ioctl;
')

1
qva/vendor/common/hal_usb.te vendored
View file

@ -44,3 +44,4 @@ allow vendor_hal_usb_qti vendor_sysfs_usb_node:dir r_dir_perms;
allow vendor_hal_usb_qti vendor_sysfs_usb_node:file rw_file_perms; allow vendor_hal_usb_qti vendor_sysfs_usb_node:file rw_file_perms;
r_dir_file(vendor_hal_usb_qti, vendor_sysfs_battery_supply); r_dir_file(vendor_hal_usb_qti, vendor_sysfs_battery_supply);
r_dir_file(vendor_hal_usb_qti, vendor_sysfs_usb_supply); r_dir_file(vendor_hal_usb_qti, vendor_sysfs_usb_supply);
allow vendor_hal_usb_qti vendor_sysfs_usb_device:file rw_file_perms;