tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "sepolicy: ashmem entry point for libcutils"

Browse source
This commit is contained in:
Treehugger Robot 2019-09-26 17:56:53 +00:00 committed by Gerrit Code Review
commit e612ecd6ed
5 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
private/compat/29.0/29.0.ignore.cil
View file

@ -5,6 +5,7 @@
(typeattribute new_objects) (typeattribute new_objects)
(typeattributeset new_objects (typeattributeset new_objects
( new_objects ( new_objects
ashmem_libcutils_device
boringssl_self_test boringssl_self_test
charger_prop charger_prop
cold_boot_done_prop cold_boot_done_prop

1
private/file_contexts
View file

@ -75,6 +75,7 @@
/dev/adf-interface[0-9]*\.[0-9]* u:object_r:graphics_device:s0 /dev/adf-interface[0-9]*\.[0-9]* u:object_r:graphics_device:s0
/dev/adf-overlay-engine[0-9]*\.[0-9]* u:object_r:graphics_device:s0 /dev/adf-overlay-engine[0-9]*\.[0-9]* u:object_r:graphics_device:s0
/dev/ashmem u:object_r:ashmem_device:s0 /dev/ashmem u:object_r:ashmem_device:s0
/dev/ashmem(.*)? u:object_r:ashmem_libcutils_device:s0
/dev/audio.* u:object_r:audio_device:s0 /dev/audio.* u:object_r:audio_device:s0
/dev/binder u:object_r:binder_device:s0 /dev/binder u:object_r:binder_device:s0
/dev/block(/.*)? u:object_r:block_device:s0 /dev/block(/.*)? u:object_r:block_device:s0

1
public/device.te
View file

@ -1,6 +1,7 @@
# Device types # Device types
type device, dev_type, fs_type; type device, dev_type, fs_type;
type ashmem_device, dev_type, mlstrustedobject; type ashmem_device, dev_type, mlstrustedobject;
type ashmem_libcutils_device, dev_type, mlstrustedobject;
type audio_device, dev_type; type audio_device, dev_type;
type binder_device, dev_type, mlstrustedobject; type binder_device, dev_type, mlstrustedobject;
type hwbinder_device, dev_type, mlstrustedobject; type hwbinder_device, dev_type, mlstrustedobject;

3
public/domain.te
View file

@ -80,6 +80,9 @@ allow {
-untrusted_app_all -untrusted_app_all
} ashmem_device:chr_file rw_file_perms; } ashmem_device:chr_file rw_file_perms;
# This device is used by libcutils.
allow domain ashmem_libcutils_device:chr_file rw_file_perms;
# Allow using fds to /dev/ashmem. # Allow using fds to /dev/ashmem.
allow domain ashmem_server:fd use; allow domain ashmem_server:fd use;

3
vendor/hal_sensors_default.te vendored
View file

@ -17,3 +17,6 @@ allow hal_sensors_default ion_device:chr_file r_file_perms;
# allow sensor hal to use lock for keeping system awake for wake up # allow sensor hal to use lock for keeping system awake for wake up
# events delivery. # events delivery.
wakelock_use(hal_sensors_default); wakelock_use(hal_sensors_default);
# allow sensor hal to use ashmem fd from system_server.
allow hal_sensors_default system_server:fd use;