BOBtheBlinker/android_device_oneplus_dre
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

sdm845-common: sepolicy: Drop unnecessary HAL rules

Browse source 
* coredomain can write to binder device without granting anything.

Change-Id: Ie657d1e79702b557f00376d31f87d33e104eaf3d
This commit is contained in:
LuK1337 2019-06-17 11:04:25 +02:00
parent 92fc5501e5
commit b687e1a04f
3 changed files with 0 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
sepolicy/private/hal_livedisplay_sdm845.te
View file

@ -4,9 +4,6 @@ hal_server_domain(hal_livedisplay_sdm845, hal_lineage_livedisplay)
type hal_livedisplay_sdm845_exec, exec_type, file_type; type hal_livedisplay_sdm845_exec, exec_type, file_type;
init_daemon_domain(hal_livedisplay_sdm845) init_daemon_domain(hal_livedisplay_sdm845)
# Talk to the binder device node
allow hal_livedisplay_sdm845 binder_device:chr_file rw_file_perms;
# Allow LiveDisplay to store files under /data/display and access them # Allow LiveDisplay to store files under /data/display and access them
allow hal_livedisplay_sdm845 display_data_file:dir rw_dir_perms; allow hal_livedisplay_sdm845 display_data_file:dir rw_dir_perms;
allow hal_livedisplay_sdm845 display_data_file:file create_file_perms; allow hal_livedisplay_sdm845 display_data_file:file create_file_perms;

3
sepolicy/private/hal_touch_sdm845.te
View file

@ -4,9 +4,6 @@ hal_server_domain(hal_touch_sdm845, hal_lineage_touch)
type hal_touch_sdm845_exec, exec_type, file_type; type hal_touch_sdm845_exec, exec_type, file_type;
init_daemon_domain(hal_touch_sdm845) init_daemon_domain(hal_touch_sdm845)
# Talk to the binder device node
allow hal_touch_sdm845 binder_device:chr_file rw_file_perms;
# Allow access to gesture enable nodes # Allow access to gesture enable nodes
allow hal_touch_sdm845 proc_touchpanel:dir search; allow hal_touch_sdm845 proc_touchpanel:dir search;
allow hal_touch_sdm845 proc_touchpanel:file rw_file_perms; allow hal_touch_sdm845 proc_touchpanel:file rw_file_perms;

3
sepolicy/private/hal_trust_sdm845.te
View file

@ -4,9 +4,6 @@ hal_server_domain(hal_trust_sdm845, hal_lineage_trust)
type hal_trust_sdm845_exec, exec_type, file_type; type hal_trust_sdm845_exec, exec_type, file_type;
init_daemon_domain(hal_trust_sdm845) init_daemon_domain(hal_trust_sdm845)
# Talk to the binder device node
allow hal_trust_sdm845 binder_device:chr_file rw_file_perms;
# Allow access to otg toggle node # Allow access to otg toggle node
allow hal_trust_sdm845 sysfs_usb_supply:dir search; allow hal_trust_sdm845 sysfs_usb_supply:dir search;
allow hal_trust_sdm845 sysfs_usb_supply:file rw_file_perms; allow hal_trust_sdm845 sysfs_usb_supply:file rw_file_perms;