tequilaOS/platform_device_qcom_sepolicy_vndr-sm8450
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "sepolicy: add rule to use diag hal for Factory tool"

Browse source
This commit is contained in:
qctecmdr 2020-08-18 03:32:12 -07:00 committed by Gerrit - the friendly Code Review server
commit e11526d0c0
6 changed files with 22 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
generic/vendor/test/system_app.te vendored Normal file → Executable file
View file

@ -33,3 +33,10 @@ userdebug_or_eng(`
allow system_app self:socket create_socket_perms_no_ioctl;
')
userdebug_or_eng(`
# allow system_app access diag hal
diag_use(system_app)
hal_client_domain(system_app, vendor_hal_diaghal)
hal_client_domain(system_app, hal_allocator)
')

2
legacy/vendor/common/mmi_sys.te vendored
View file

@ -37,4 +37,6 @@ hal_client_domain(vendor_mmi_sys, vendor_hal_factory_qti);
#diag
userdebug_or_eng(`
diag_use(vendor_mmi_sys)
hal_client_domain(vendor_mmi_sys, vendor_hal_diaghal)
hal_client_domain(vendor_mmi_sys, hal_allocator)
')

2
legacy/vendor/common/qcomsysd.te vendored
View file

@ -57,4 +57,6 @@ userdebug_or_eng(`
allow vendor_qcomsysd sysfs_qdss_dev:dir r_dir_perms;
allow vendor_qcomsysd sysfs_qdss_dev:file rw_file_perms;
allow vendor_qcomsysd sysfs_data:file r_file_perms;
hal_client_domain(vendor_qcomsysd, vendor_hal_diaghal)
hal_client_domain(vendor_qcomsysd, hal_allocator)
')

7
legacy/vendor/test/system_app.te vendored Normal file → Executable file
View file

@ -35,3 +35,10 @@ userdebug_or_eng(`
allow system_app self:socket create_socket_perms_no_ioctl;
')
userdebug_or_eng(`
# allow system_app access diag hal
diag_use(system_app)
hal_client_domain(system_app, vendor_hal_diaghal)
hal_client_domain(system_app, hal_allocator)
')

2
qva/vendor/common/mmi_sys.te vendored
View file

@ -33,4 +33,6 @@ hal_client_domain(vendor_mmi_sys, vendor_hal_factory_qti);
#diag
userdebug_or_eng(`
diag_use(vendor_mmi_sys)
hal_client_domain(vendor_mmi_sys, vendor_hal_diaghal)
hal_client_domain(vendor_mmi_sys, hal_allocator)
')

2
qva/vendor/common/qcomsysd.te vendored
View file

@ -55,4 +55,6 @@ userdebug_or_eng(`
allow vendor_qcomsysd vendor_sysfs_qdss_dev:dir r_dir_perms;
allow vendor_qcomsysd vendor_sysfs_qdss_dev:file rw_file_perms;
allow vendor_qcomsysd vendor_sysfs_data:file r_file_perms;
hal_client_domain(vendor_qcomsysd, vendor_hal_diaghal)
hal_client_domain(vendor_qcomsysd, hal_allocator)
')