408d16c462
* Since we aren't including device/qcom/sepolicy/.../vendor, /dev/dri/card0 is labeled as u:object_r:device:s0 thus recovery running in -user mode has no access to it. Change-Id: Ie0b4b9ba04f85de9250e50d070940f0ea84335e8
30 lines
1.3 KiB
Text
30 lines
1.3 KiB
Text
# Data files
|
|
/data/misc/display(/.*)? u:object_r:display_misc_file:s0
|
|
|
|
# Devices
|
|
/dev/dri/card0 u:object_r:graphics_device:s0
|
|
|
|
# Files in rootfs
|
|
/op1(/.*)? u:object_r:op1_file:s0
|
|
/op2(/.*)? u:object_r:op2_file:s0
|
|
/op_odm(/.*)? u:object_r:system_file:s0
|
|
|
|
# Files in sysfs
|
|
/sys/devices/platform/soc/soc:goodix_fp/proximity_state u:object_r:sysfs_fpc_proximity:s0
|
|
|
|
# HALs
|
|
/(product|system/product)/vendor_overlay/[0-9]+/bin/hw/android\.hardware\.light@2\.0-service u:object_r:hal_light_default_exec:s0
|
|
/system/bin/hw/lineage\.biometrics\.fingerprint\.inscreen@1.0-service\.oneplus_fajita u:object_r:hal_fod_sdm845_exec:s0
|
|
/system/bin/hw/lineage\.livedisplay@2\.0-service\.oneplus_sdm845 u:object_r:hal_livedisplay_sdm845_exec:s0
|
|
/system/bin/hw/lineage\.touch@1\.0-service\.oneplus_sdm845 u:object_r:hal_touch_sdm845_exec:s0
|
|
|
|
# DASH
|
|
/system/bin/dashd u:object_r:dashd_exec:s0
|
|
|
|
# tri-state-key
|
|
/system/bin/tri-state-key_daemon u:object_r:tri-state-key_daemon_exec:s0
|
|
|
|
# Vendor overlay
|
|
/(product|system/product)/vendor_overlay/[0-9]+/etc(/.*)? u:object_r:vendor_configs_file:s0
|
|
/(product|system/product)/vendor_overlay/[0-9]+/lib(64)?/hw u:object_r:vendor_hal_file:s0
|
|
/(product|system/product)/vendor_overlay/[0-9]+/overlay(/.*)? u:object_r:vendor_overlay_file:s0
|