tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
platform_system_sepolicy/vendor
History
Yi-Yo Chiang 5854941f63 Add rules for calling ReadDefaultFstab() 
Grant ReadDefaultFstab() callers
  allow scontext { metadata_file gsi_metadata_file_type }:dir search;
  allow scontext gsi_public_metadata_file:file r_file_perms;
so they can search / read DSU metadata files.
The DSU metadata files are required to deduce the correct fstab.

Also tighten the neverallow rules in gsid.te.

Bug: 181110285
Test: Build pass, presubmit test
Test: Boot and check avc denials
Test: Boot with DSU and check avc denials
Change-Id: Ie464b9a8f7a89f9cf8f4e217dad1322ba3ad0633
2021-03-29 15:23:29 +08:00
..
file.te sepolicy(hostapd): Add a HIDL interface for hostapd 2018-05-04 21:36:24 +00:00
file_contexts Add CEC HAL 1.1 2021-02-15 09:36:55 +01:00
hal_atrace_default.te Add atrace HAL 1.0 sepolicy 2018-09-27 23:18:29 +00:00
hal_audio_default.te hal_audio_default: allow audioserver fd for status dump 2018-09-14 13:50:44 -07:00
hal_audiocontrol_default.te Move automotive HALs sepolicy to system/ 2018-05-04 21:36:48 +00:00
hal_authsecret_default.te authsecret HAL policies. 2018-02-05 11:19:46 +00:00
hal_bluetooth_btlinux.te btlinux: Move HAL definitions from system/bt 2018-06-27 23:56:31 +00:00
hal_bluetooth_default.te sepolicy: make exec_types in /vendor a subset of vendor_file_type 2017-04-11 17:20:36 +00:00
hal_bootctl_default.te Add rules for calling ReadDefaultFstab() 2021-03-29 15:23:29 +08:00
hal_broadcastradio_default.te Move Broadcast Radio HAL to a separate binary. 2017-09-15 10:16:48 -07:00
hal_camera_default.te Revert "Allow hal_face to write to /data/vendor/camera_calibration/*." 2019-06-19 20:15:50 +00:00
hal_can_socketcan.te Enable CAN HAL to scan /sys/devices for USB CAN 2020-03-17 12:10:07 -07:00
hal_cas_default.te Use hidl memory from allocator in CAS 2018-12-17 22:49:18 +00:00
hal_configstore_default.te sepolicy: make exec_types in /vendor a subset of vendor_file_type 2017-04-11 17:20:36 +00:00
hal_confirmationui_default.te Added default policy for Confirmation UI HAL 2018-01-24 10:22:40 -08:00
hal_contexthub_default.te sepolicy: make exec_types in /vendor a subset of vendor_file_type 2017-04-11 17:20:36 +00:00
hal_drm_default.te Allow drm hals to access allocator hal 2020-04-13 20:01:06 +00:00
hal_dumpstate_default.te sepolicy: make exec_types in /vendor a subset of vendor_file_type 2017-04-11 17:20:36 +00:00
hal_evs_default.te Update automotive display service rules 2020-02-29 11:01:26 -08:00
hal_face_default.te Added placeholder SELinux policy for the biometric face HAL. 2018-12-28 12:23:56 -08:00
hal_fingerprint_default.te Remove unnecessary attributes 2017-04-14 09:39:19 -07:00
hal_gatekeeper_default.te sepolicy: make exec_types in /vendor a subset of vendor_file_type 2017-04-11 17:20:36 +00:00
hal_gnss_default.te Add gnss_device dev_type 2020-03-17 20:25:51 +00:00
hal_graphics_allocator_default.te Properly Treble-ize tmpfs access 2019-01-26 17:30:41 +00:00
hal_graphics_composer_default.te Initial selinux policy support for memfd 2019-01-30 19:11:49 +00:00
hal_health_default.te sepolicy: make exec_types in /vendor a subset of vendor_file_type 2017-04-11 17:20:36 +00:00
hal_health_storage_default.te health.filesystem HAL renamed to health.storage 2018-09-20 04:12:45 +00:00
hal_identity_default.te Add SELinux policy for Identity Credential HAL 2020-01-14 20:13:39 -05:00
hal_input_classifier_default.te Permissions for InputClassifier HAL 2019-01-11 02:08:19 +00:00
hal_ir_default.te sepolicy: make exec_types in /vendor a subset of vendor_file_type 2017-04-11 17:20:36 +00:00
hal_keymaster_default.te Adding ability for hal keymaster to read vendor SPL 2018-05-11 16:51:58 +00:00
hal_keymint_default.te The SE Policies to incorporate ISecureClock and ISharedSecret services along with IKeyMintDevice service into default keymint HAL Server. 2021-02-10 18:45:07 +00:00
hal_light_default.te sepolicy: make exec_types in /vendor a subset of vendor_file_type 2017-04-11 17:20:36 +00:00
hal_lowpan_default.te Sync internal master and AOSP sepolicy. 2017-09-26 14:38:47 -07:00
hal_memtrack_default.te sepolicy: make exec_types in /vendor a subset of vendor_file_type 2017-04-11 17:20:36 +00:00
hal_nfc_default.te NFC HAL no longer violates socket access restrictions 2017-04-27 17:21:42 +00:00
hal_oemlock_default.te Add sepolicy for oemlock aidl HAL 2021-01-11 05:57:17 +00:00
hal_power_default.te sepolicy: make exec_types in /vendor a subset of vendor_file_type 2017-04-11 17:20:36 +00:00
hal_power_stats_default.te Add power.stats HAL 1.0 sepolicy 2018-12-11 00:11:08 +00:00
hal_radio_config_default.te Add sepolicy for radio.config 2018-01-24 12:13:10 -08:00
hal_radio_default.te Add sepolicy for radio sap 1.2 2018-04-16 12:00:11 -07:00
hal_rebootescrow_default.te rebootescrow: allow use of block file 2020-01-27 12:28:44 -08:00
hal_secure_element_default.te Add secure_element_device 2018-03-07 13:54:21 -08:00
hal_sensors_default.te Add missing permission for accessing the DMA-BUF system heap 2021-03-03 14:22:48 -08:00
hal_tetheroffload_default.te Sync internal master and AOSP sepolicy. 2017-09-26 14:38:47 -07:00
hal_thermal_default.te sepolicy: make exec_types in /vendor a subset of vendor_file_type 2017-04-11 17:20:36 +00:00
hal_tv_cec_default.te Make hal_tv_cec_default exec a vendor_file_type 2017-04-13 17:32:43 -07:00
hal_tv_input_default.te sepolicy: make exec_types in /vendor a subset of vendor_file_type 2017-04-11 17:20:36 +00:00
hal_tv_tuner_default.te Allow tuner default implementation to access /dev/dma_heap/system 2021-03-02 15:21:45 -08:00
hal_usb_default.te sepolicy: make exec_types in /vendor a subset of vendor_file_type 2017-04-11 17:20:36 +00:00
hal_usb_gadget_default.te Add sepolicy for usb gadget hal v1.1 2020-01-15 16:44:39 +08:00
hal_vehicle_default.te Revert "Revert "hal_can_*: use hal_attribute_service"" 2021-01-11 18:25:51 +00:00
hal_vibrator_default.te sepolicy: make exec_types in /vendor a subset of vendor_file_type 2017-04-11 17:20:36 +00:00
hal_vr_default.te sepolicy: make exec_types in /vendor a subset of vendor_file_type 2017-04-11 17:20:36 +00:00
hal_weaver_default.te Add sepolicy for weaver aidl HAL service 2021-01-22 06:34:41 +00:00
hal_wifi_default.te sepolicy: make exec_types in /vendor a subset of vendor_file_type 2017-04-11 17:20:36 +00:00
hal_wifi_hostapd_default.te sepolicy(hostapd): Add a HIDL interface for hostapd 2018-05-04 21:36:24 +00:00
hal_wifi_supplicant_default.te Use proc_net_type instead of proc_net. 2018-05-04 14:44:02 +01:00
keys.conf Copying platform seinfo into vendor partition 2020-06-04 17:27:15 +08:00
mac_permissions.xml Copying platform seinfo into vendor partition 2020-06-04 17:27:15 +08:00
mediacodec.te Allow mediacodec to allocate from the DMA-BUF system heap 2021-01-14 05:13:54 +00:00
rild.te Revert "Revert "Move rild from public to vendor."" 2018-03-12 13:13:39 -07:00
tee.te sepolicy: Add rules for non-init namespaces 2017-11-21 08:34:32 -07:00
vendor_install_recovery.te Moving recovery resources from /system to /vendor 2019-10-04 14:40:27 -07:00
vendor_misc_writer.te Add vendor_misc_writer. 2019-05-21 07:06:31 -07:00
vendor_modprobe.te modprobe: add -s/--syslog flag 2020-06-25 11:30:24 -07:00
vndservice_contexts Allow vndservicemanager to self-register. 2020-03-06 16:35:52 -08:00
vndservicemanager.te Allow vndservicemanager to self-register. 2020-03-06 16:35:52 -08:00