A-Team_Digital_Solutions/android_device_motorola_sm6375-common
Watch
2
0
Fork
You've already forked android_device_motorola_sm6375-common
 0
mirror of https://github.com/BobTheBlinker/android_device_motorola_sm6375-common.git synced 2026-10-29 19:21:32 -04:00
Code Issues Projects Releases Packages Wiki Activity

sm6375-common: sepolicy: Label init.mmi.boot.sh and resolve denials

Browse source 
Change-Id: I78dcfb47e28a20304e64880aeae1876d566d7924
This commit is contained in:
Michael Bestas 2023-04-19 00:05:59 +03:00
commit 84d3db5879
No known key found for this signature in database
3 changed files with 20 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
sepolicy/vendor/file_contexts vendored
View file

@ -84,6 +84,7 @@
# Vendor init scripts
/(vendor|system/vendor)/bin/load_touch\.sh u:object_r:vendor_qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.mmi\.boot\.sh u:object_r:vendor_mmi_boot_exec:s0
/(vendor|system/vendor)/bin/init\.mmi\.laser\.sh u:object_r:vendor_mmi_laser_exec:s0
/(vendor|system/vendor)/bin/init\.mmi\.touch\.sh u:object_r:vendor_init_touch_exec:s0
/(vendor|system/vendor)/bin/init\.oem\.(fingerprint2|fingerprint\.overlay)\.sh u:object_r:vendor_init_fingerprint_exec:s0

4
sepolicy/vendor/property_contexts vendored
View file

@ -7,7 +7,11 @@ ro.vendor.ril.svdo u:object_r:vendor_radio_prop:s0
# Motorola
persist.vendor.nfc. u:object_r:vendor_mot_nfc_prop:s0
ro.vendor.hw. u:object_r:vendor_mot_hw_prop:s0
ro.vendor.mot.cust_md5 u:object_r:vendor_mot_hw_prop:s0
ro.vendor.mot.gki. u:object_r:vendor_mot_hw_prop:s0
ro.vendor.mot.iccid u:object_r:vendor_mot_hw_prop:s0
ro.vendor.bootreason u:object_r:vendor_mot_hw_prop:s0
ro.vendor.manufacturedate u:object_r:vendor_mot_hw_prop:s0
ro.vendor.product.device u:object_r:vendor_mot_hw_prop:s0
ro.vendor.product.display u:object_r:vendor_mot_hw_prop:s0
ro.vendor.product.hardware.sku.variant u:object_r:vendor_mot_hw_prop:s0

15
sepolicy/vendor/vendor_mmi_boot.te vendored Normal file
View file

@ -0,0 +1,15 @@
type vendor_mmi_boot, domain;
type vendor_mmi_boot_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(vendor_mmi_boot)
allow vendor_mmi_boot mnt_vendor_file:dir search;
allow vendor_mmi_boot mnt_vendor_file:file r_file_perms;
allow vendor_mmi_boot proc_moto_boot:file r_file_perms;
allow vendor_mmi_boot vendor_proc_hw:dir r_dir_perms;
allow vendor_mmi_boot vendor_proc_hw:file r_file_perms;
allow vendor_mmi_boot vendor_toolbox_exec:file rx_file_perms;
set_prop(vendor_mmi_boot, vendor_mot_hw_prop)