tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Compatibility for vendor_hidraw_device" into main am: 1327971c7c am: a4ffe3b38d

Browse source 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/3116384

Change-Id: I1e09ffd0459dc0bf97276b25370320c7760d8ce8
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Treehugger Robot 2024-06-11 10:50:31 +00:00 committed by Automerger Merge Worker
commit 9bb8a3a971
1 changed files with 14 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
private/compat/34.0/34.0.compat.cil
View file

@ -1,3 +1,17 @@
;; complement CIL file for compatibility between ToT policy and 34.0 vendors. ;; complement CIL file for compatibility between ToT policy and 34.0 vendors.
;; will be compiled along with other normal policy files, on 34.0 vendors. ;; will be compiled along with other normal policy files, on 34.0 vendors.
;; ;;
;; This type may or may not already exist in vendor policy. The 202404 sepolicy
;; (well, the 24Q1 release) added hidraw_device, but existing vendor policy
;; may still label the relevant devices with the old label.
;;
;; Re-define it here (duplicate definitions in CIL will be ignored) - so we can
;; duplicate the new policy for the old label to keep things working.
;; (Doing this in 34.0.cil ended up being too messy.)
;; See b/340923653.
(type vendor_hidraw_device)
(typeattributeset dev_type (vendor_hidraw_device))
(allow system_server vendor_hidraw_device (dir (open getattr read search ioctl lock watch watch_reads)))
(allow system_server vendor_hidraw_device (chr_file (getattr open read ioctl lock map watch watch_reads append write)))