tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

All hal policies expressed as attributes.

Browse source 
Bug: 32123421
Bug: 32905206

Test: compiles, nfc works
Change-Id: Ibf72ef70255573e4df0863ea640354b3c37eb47d
This commit is contained in:
Steven Moreland 2016-12-13 12:17:09 -08:00
parent a95c52e347
commit 29eed9faea
34 changed files with 62 additions and 74 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
private/file_contexts
View file

@ -228,19 +228,19 @@
/system/bin/webview_zygote64 u:object_r:webview_zygote_exec:s0
/system/fake-lib(64)?/libart.* u:object_r:libart_file:s0
/system/lib(64)?/libart.* u:object_r:libart_file:s0
/system/bin/hw/android\.hardware\.audio@2\.0-service u:object_r:hal_audio_exec:s0
/system/bin/hw/android\.hardware\.audio@2\.0-service u:object_r:hal_audio_default_exec:s0
/system/bin/hw/android\.hardware\.boot@1\.0-service u:object_r:hal_boot_exec:s0
/system/bin/hw/android\.hardware\.ir@1\.0-service u:object_r:hal_ir_default_exec:s0
/system/bin/hw/android\.hardware\.graphics\.allocator@2\.0-service u:object_r:hal_graphics_allocator_exec:s0
/system/bin/hw/android\.hardware\.graphics\.composer@2\.1-service u:object_r:hal_graphics_composer_exec:s0
/system/bin/hw/android\.hardware\.graphics\.allocator@2\.0-service u:object_r:hal_graphics_allocator_default_exec:s0
/system/bin/hw/android\.hardware\.graphics\.composer@2\.1-service u:object_r:hal_graphics_composer_default_exec:s0
/system/bin/hw/android\.hardware\.ir@1\.0-service u:object_r:hal_ir_default_exec:s0
/system/bin/hw/android\.hardware\.light@2\.0-service u:object_r:hal_light_default_exec:s0
/system/bin/hw/android\.hardware\.memtrack@1\.0-service u:object_r:hal_memtrack_exec:s0
/system/bin/hw/android\.hardware\.nfc@1\.0-service u:object_r:hal_nfc_exec:s0
/system/bin/hw/android\.hardware\.power@1\.0-service u:object_r:hal_power_exec:s0
/system/bin/hw/android\.hardware\.thermal@1\.0-service u:object_r:hal_thermal_exec:s0
/system/bin/hw/android\.hardware\.vibrator@1\.0-service u:object_r:hal_vibrator_exec:s0
/system/bin/hw/android\.hardware\.vr@1\.0-service u:object_r:hal_vr_exec:s0
/system/bin/hw/android\.hardware\.wifi@1\.0-service u:object_r:hal_wifi_exec:s0
/system/bin/hw/android\.hardware\.memtrack@1\.0-service u:object_r:hal_memtrack_default_exec:s0
/system/bin/hw/android\.hardware\.nfc@1\.0-service u:object_r:hal_nfc_default_exec:s0
/system/bin/hw/android\.hardware\.power@1\.0-service u:object_r:hal_power_default_exec:s0
/system/bin/hw/android\.hardware\.thermal@1\.0-service u:object_r:hal_thermal_default_exec:s0
/system/bin/hw/android\.hardware\.vibrator@1\.0-service u:object_r:hal_vibrator_default_exec:s0
/system/bin/hw/android\.hardware\.vr@1\.0-service u:object_r:hal_vr_default_exec:s0
/system/bin/hw/android\.hardware\.wifi@1\.0-service u:object_r:hal_wifi_default_exec:s0
#############################
# Vendor files

3
private/hal_audio.te
View file

@ -1,3 +0,0 @@
# type_transition must be private policy the domain_trans rules could stay
# public, but conceptually should go with this
init_daemon_domain(hal_audio)

4
private/hal_audio_default.te Normal file
View file

@ -0,0 +1,4 @@
type hal_audio_default, hal_audio, domain;
type hal_audio_default_exec, exec_type, file_type;
init_daemon_domain(hal_audio_default)

1
private/hal_graphics_allocator.te
View file

@ -1 +0,0 @@
init_daemon_domain(hal_graphics_allocator)

4
private/hal_graphics_allocator_default.te Normal file
View file

@ -0,0 +1,4 @@
type hal_graphics_allocator_default, hal_graphics_allocator, domain;
type hal_graphics_allocator_default_exec, exec_type, file_type;
init_daemon_domain(hal_graphics_allocator_default)

1
private/hal_graphics_composer.te
View file

@ -1 +0,0 @@
init_daemon_domain(hal_graphics_composer)

4
private/hal_graphics_composer_default.te Normal file
View file

@ -0,0 +1,4 @@
type hal_graphics_composer_default, hal_graphics_composer, domain;
type hal_graphics_composer_default_exec, exec_type, file_type;
init_daemon_domain(hal_graphics_composer_default)

1
private/hal_ir_default.te
View file

@ -1,5 +1,4 @@
type hal_ir_default, hal_ir, domain;
type hal_ir_default_exec, exec_type, file_type;
# may be started by init
init_daemon_domain(hal_ir_default)

1
private/hal_light_default.te
View file

@ -1,5 +1,4 @@
type hal_light_default, hal_light, domain;
type hal_light_default_exec, exec_type, file_type;
# may be started by init
init_daemon_domain(hal_light_default)

2
private/hal_memtrack.te
View file

@ -1,2 +0,0 @@
# may be started by init
init_daemon_domain(hal_memtrack)

4
private/hal_memtrack_default.te Normal file
View file

@ -0,0 +1,4 @@
type hal_memtrack_default, hal_memtrack, domain;
type hal_memtrack_default_exec, exec_type, file_type;
init_daemon_domain(hal_memtrack_default)

2
private/hal_nfc.te
View file

@ -1,2 +0,0 @@
# may be started by init
init_daemon_domain(hal_nfc)

4
private/hal_nfc_default.te Normal file
View file

@ -0,0 +1,4 @@
type hal_nfc_default, hal_nfc, domain;
type hal_nfc_default_exec, exec_type, file_type;
init_daemon_domain(hal_nfc_default)

2
private/hal_power.te
View file

@ -1,2 +0,0 @@
# may be started by init
init_daemon_domain(hal_power)

4
private/hal_power_default.te Normal file
View file

@ -0,0 +1,4 @@
type hal_power_default, hal_power, domain;
type hal_power_default_exec, exec_type, file_type;
init_daemon_domain(hal_power_default)

2
private/hal_thermal.te
View file

@ -1,2 +0,0 @@
# May be started by init
init_daemon_domain(hal_thermal)

4
private/hal_thermal_default.te Normal file
View file

@ -0,0 +1,4 @@
type hal_thermal_default, hal_thermal, domain;
type hal_thermal_default_exec, exec_type, file_type;
init_daemon_domain(hal_thermal_default)

2
private/hal_vibrator.te
View file

@ -1,2 +0,0 @@
# may be started by init
init_daemon_domain(hal_vibrator)

4
private/hal_vibrator_default.te Normal file
View file

@ -0,0 +1,4 @@
type hal_vibrator_default, hal_vibrator, domain;
type hal_vibrator_default_exec, exec_type, file_type;
init_daemon_domain(hal_vibrator_default)

2
private/hal_vr.te
View file

@ -1,2 +0,0 @@
# may be started by init
init_daemon_domain(hal_vr)

4
private/hal_vr_default.te Normal file
View file

@ -0,0 +1,4 @@
type hal_vr_default, hal_vr, domain;
type hal_vr_default_exec, exec_type, file_type;
init_daemon_domain(hal_vr_default)

3
private/hal_wifi.te
View file

@ -1,3 +0,0 @@
# type_transition must be private policy the domain_trans rules could stay
# public, but conceptually should go with this
init_daemon_domain(hal_wifi)

4
private/hal_wifi_default.te Normal file
View file

@ -0,0 +1,4 @@
type hal_wifi_default, hal_wifi, domain;
type hal_wifi_default_exec, exec_type, file_type;
init_daemon_domain(hal_wifi_default)

12
public/attributes
View file

@ -115,5 +115,15 @@ attribute boot_control_hal;
attribute update_engine_common;
# HALs
attribute hal_light;
attribute hal_audio;
attribute hal_graphics_allocator;
attribute hal_graphics_composer;
attribute hal_ir;
attribute hal_light;
attribute hal_memtrack;
attribute hal_nfc;
attribute hal_power;
attribute hal_thermal;
attribute hal_vibrator;
attribute hal_vr;
attribute hal_wifi;

4
public/hal_audio.te
View file

@ -1,7 +1,3 @@
# hal_audio - audio services daemon
type hal_audio, domain;
type hal_audio_exec, exec_type, file_type;
hwbinder_use(hal_audio)
binder_call(hal_audio, audioserver)

4
public/hal_graphics_allocator.te
View file

@ -1,7 +1,3 @@
# graphics buffer allocator subsystem
type hal_graphics_allocator, domain;
type hal_graphics_allocator_exec, exec_type, file_type;
# hwbinder access
hwbinder_use(hal_graphics_allocator)

4
public/hal_graphics_composer.te
View file

@ -1,7 +1,3 @@
# graphics composer subsystem
type hal_graphics_composer, domain;
type hal_graphics_composer_exec, exec_type, file_type;
# HwBinder access
hwbinder_use(hal_graphics_composer)
# IComposerCallback

4
public/hal_memtrack.te
View file

@ -1,6 +1,2 @@
# memtrack subsystem
type hal_memtrack, domain;
type hal_memtrack_exec, exec_type, file_type;
# hwbinder access
hwbinder_use(hal_memtrack);

4
public/hal_nfc.te
View file

@ -1,7 +1,3 @@
# nfc subsystem
type hal_nfc, domain;
type hal_nfc_exec, exec_type, file_type;
# hwbinder access
hwbinder_use(hal_nfc)

4
public/hal_power.te
View file

@ -1,6 +1,2 @@
# power subsystem
type hal_power, domain;
type hal_power_exec, exec_type, file_type;
# hwbinder access
hwbinder_use(hal_power);

4
public/hal_thermal.te
View file

@ -1,7 +1,3 @@
# thermal subsystem
type hal_thermal, domain;
type hal_thermal_exec, exec_type, file_type;
# hwbinder access
hwbinder_use(hal_thermal)

4
public/hal_vibrator.te
View file

@ -1,7 +1,3 @@
# vibrator subsystem
type hal_vibrator, domain;
type hal_vibrator_exec, exec_type, file_type;
# hwbinder access
hwbinder_use(hal_vibrator)

4
public/hal_vr.te
View file

@ -1,7 +1,3 @@
# vr subsystem
type hal_vr, domain;
type hal_vr_exec, exec_type, file_type;
# hwbinder access
hwbinder_use(hal_vr)

4
public/hal_wifi.te
View file

@ -1,7 +1,3 @@
# wifi legacy hal
type hal_wifi, domain;
type hal_wifi_exec, exec_type, file_type;
## hwbinder access
hwbinder_use(hal_wifi)