universal7885: sepolicy: Address A20 and DS denials

Change-Id: I5838c1cd88f4479169651b8a66f70d52242c2e4e
Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
This commit is contained in:
roynatech2544 2021-11-05 03:29:34 +09:00
commit 0631cfad71
No known key found for this signature in database
GPG key ID: 9675C32163D88D30
5 changed files with 7 additions and 8 deletions

View file

@ -24,8 +24,6 @@ mdc. u:object_r:exported_config_prop:s0
persist.sys.omc_support u:object_r:exported_config_prop:s0 persist.sys.omc_support u:object_r:exported_config_prop:s0
persist.sys.omc_etcpath u:object_r:exported_config_prop:s0 persist.sys.omc_etcpath u:object_r:exported_config_prop:s0
ro.omc. u:object_r:exported_config_prop:s0 ro.omc. u:object_r:exported_config_prop:s0
mdc.sys.enable_smff0 u:object_r:exported_config_prop:s0
ro.csc.countryiso_code u:object_r:exported_config_prop:s0
### RADIO ### RADIO
ril.NwNmId u:object_r:telephony_config_prop:s0 ril.NwNmId u:object_r:telephony_config_prop:s0

View file

@ -105,21 +105,22 @@ genfscon sysfs /devices/virtual/input/input3/poll_delay
genfscon sysfs /devices/virtual/input/input4/poll_delay u:object_r:sysfs_input_writable:s0 genfscon sysfs /devices/virtual/input/input4/poll_delay u:object_r:sysfs_input_writable:s0
genfscon sysfs /devices/virtual/input/input8/poll_delay u:object_r:sysfs_input_writable:s0 genfscon sysfs /devices/virtual/input/input8/poll_delay u:object_r:sysfs_input_writable:s0
genfscon sysfs /devices/virtual/input/input9/poll_delay u:object_r:sysfs_input_writable:s0 genfscon sysfs /devices/virtual/input/input9/poll_delay u:object_r:sysfs_input_writable:s0
# A20e GPIO
genfscon sysfs /devices/platform/gpio_keys/input/input12 u:object_r:sysfs_input:s0 genfscon sysfs /devices/platform/gpio_keys/input/input12 u:object_r:sysfs_input:s0
# A20 GPIO
genfscon sysfs /devices/platform/gpio_keys/input/input13 u:object_r:sysfs_input:s0
genfscon sysfs /devices/platform/flip_cover/input/input13 u:object_r:sysfs_input:s0 genfscon sysfs /devices/platform/flip_cover/input/input13 u:object_r:sysfs_input:s0
genfscon sysfs /devices/platform/10000.mif_pdata/sim/ds_detect u:object_r:sysfs_sim_writable:s0 genfscon sysfs /devices/platform/10000.mif_pdata/sim/ds_detect u:object_r:sysfs_sim_writable:s0
# A20e RTC # A20e RTC
genfscon sysfs /devices/platform/11ce0000.speedy/i2c-5/5-0000/s2mpu08-rtc/rtc u:object_r:sysfs_rtc:s0 genfscon sysfs /devices/platform/11ce0000.speedy/i2c-5/5-0000/s2mpu08-rtc/rtc u:object_r:sysfs_rtc:s0
# A20 RTC # A20 RTC
genfscon sysfs /devices/platform/11ce0000.speedy/i2c-6/6-0000/s2mpu08-rtc/rtc u:object_r:sysfs_rtc:s0 genfscon sysfs /devices/platform/11ce0000.speedy/i2c-6/6-0000/s2mpu08-rtc/rtc u:object_r:sysfs_rtc:s0
# A20e Display # A20e Display
genfscon sysfs /devices/platform/13870000.i2c/i2c-11/11-0048/input/ u:object_r:sysfs_touchscreen_writable:s0 genfscon sysfs /devices/platform/13870000.i2c/i2c-11/11-0048/input/ u:object_r:sysfs_touchscreen_writable:s0
genfscon sysfs /devices/platform/11ce0000.speedy/i2c-5/5-0003/input/input11 u:object_r:sysfs_touchscreen_writable:s0 genfscon sysfs /devices/platform/11ce0000.speedy/i2c-5/5-0003/input/input11 u:object_r:sysfs_touchscreen_writable:s0
# A20 Display # A20 Display
genfscon sysfs /devices/platform/13870000.i2c/i2c-11/11-0020/input/ u:object_r:sysfs_touchscreen_writable:s0 genfscon sysfs /devices/platform/13870000.i2c/i2c-11/11-0020/input/ u:object_r:sysfs_touchscreen_writable:s0
genfscon sysfs /devices/platform/11ce0000.speedy/i2c-6/6-0003/input/input12 u:object_r:sysfs_touchscreen_writable:s0 genfscon sysfs /devices/platform/11ce0000.speedy/i2c-6/6-0003/input/input12 u:object_r:sysfs_touchscreen_writable:s0
genfscon sysfs /devices/platform/14870000.dsim/backlight/panel u:object_r:sysfs_graphics:s0 genfscon sysfs /devices/platform/14870000.dsim/backlight/panel u:object_r:sysfs_graphics:s0
genfscon sysfs /devices/platform/14a50000.abox/service u:object_r:sysfs_abox_writable:s0 genfscon sysfs /devices/platform/14a50000.abox/service u:object_r:sysfs_abox_writable:s0
genfscon sysfs /devices/platform/14860000.decon_f u:object_r:sysfs_decon:s0 genfscon sysfs /devices/platform/14860000.decon_f u:object_r:sysfs_decon:s0
@ -156,6 +157,7 @@ genfscon sysfs /devices/platform/13840000.i2c/i2c-9/9-003d/s2mu106-powermeter/po
genfscon sysfs /devices/platform/13840000.i2c/i2c-9/9-003d/s2mu106-muic/power_supply/muic-manager u:object_r:sysfs_charger:s0 genfscon sysfs /devices/platform/13840000.i2c/i2c-9/9-003d/s2mu106-muic/power_supply/muic-manager u:object_r:sysfs_charger:s0
genfscon sysfs /devices/platform/13840000.i2c/i2c-9/9-003d/s2mu106-charger/power_supply/otg u:object_r:sysfs_charger:s0 genfscon sysfs /devices/platform/13840000.i2c/i2c-9/9-003d/s2mu106-charger/power_supply/otg u:object_r:sysfs_charger:s0
genfscon sysfs /devices/platform/13840000.i2c/i2c-9/9-003d/s2mu106-charger/power_supply/s2mu106-charger u:object_r:sysfs_charger:s0 genfscon sysfs /devices/platform/13840000.i2c/i2c-9/9-003d/s2mu106-charger/power_supply/s2mu106-charger u:object_r:sysfs_charger:s0
genfscon sysfs /devices/platform/13830000.i2c/i2c-8/8-003c/power_supply/s2mu106-usbpd/type u:object_r:sysfs_charger:s0
genfscon sysfs /devices/platform/13830000.i2c/i2c-8/8-003b/power_supply/s2mu106-fuelgauge/type u:object_r:sysfs_fuelgauge:s0 genfscon sysfs /devices/platform/13830000.i2c/i2c-8/8-003b/power_supply/s2mu106-fuelgauge/type u:object_r:sysfs_fuelgauge:s0
genfscon sysfs /class/input/input1/enabled u:object_r:sysfs_sec_touchscreen:s0 genfscon sysfs /class/input/input1/enabled u:object_r:sysfs_sec_touchscreen:s0

View file

@ -46,7 +46,7 @@ allow gpsd self:capability2 block_suspend;
allow gpsd bt_device:chr_file rw_file_perms; allow gpsd bt_device:chr_file rw_file_perms;
allow gpsd gps_device:chr_file rw_file_perms; allow gpsd gps_device:chr_file rw_file_perms;
allow gpsd gpsd_exec:file execute_no_trans; allow gpsd gpsd_exec:file execute_no_trans;
get_prop(gpsd, exported_config_prop)
allow gpsd bootanim_system_prop:file { read open getattr }; allow gpsd bootanim_system_prop:file { read open getattr };

View file

@ -89,8 +89,6 @@ allow rild hal_radio_default:binder call;
# audio # audio
allow rild hal_audio_default:dir search; allow rild hal_audio_default:dir search;
allow rild hal_audio_default:file r_file_perms; allow rild hal_audio_default:file r_file_perms
# hwservice # hwservice
add_hwservice(rild, rild_hwservice) add_hwservice(rild, rild_hwservice)

View file

@ -19,3 +19,4 @@ allow secril_config_svc efs_file:file r_file_perms;
# ro.vendor.radio.default_network # ro.vendor.radio.default_network
set_prop(secril_config_svc, vendor_radio_prop) set_prop(secril_config_svc, vendor_radio_prop)
dontaudit secril_config_svc radio_control_prop:property_service set; dontaudit secril_config_svc radio_control_prop:property_service set;
get_prop(secril_config_svc, exported_config_prop)