From 22cd3a82901100e7387501f13b1ac78fd248ac9f Mon Sep 17 00:00:00 2001 From: SamarV-121 Date: Sun, 25 Jul 2021 21:33:04 +0530 Subject: [PATCH] universal7885: sepolicy: Cleanup unused contexts * Also rearrange them Change-Id: I27cbe8e6d4a4a26461e23485f7ae46afcd7f7d74 Signed-off-by: SamarV-121 --- sepolicy/vendor/file_contexts | 136 +++++++++++++---------------- sepolicy/vendor/hwservice.te | 4 - sepolicy/vendor/hwservice_contexts | 8 +- 3 files changed, 63 insertions(+), 85 deletions(-) diff --git a/sepolicy/vendor/file_contexts b/sepolicy/vendor/file_contexts index 5b0e56a..2fdda96 100644 --- a/sepolicy/vendor/file_contexts +++ b/sepolicy/vendor/file_contexts @@ -1,126 +1,114 @@ #################################### # Devices -/dev/mali[0-9]* u:object_r:gpu_device:s0 -/dev/umts_ipc0 u:object_r:radio_device:s0 -/dev/fimg2d u:object_r:video_device:s0 -/dev/sec-nfc u:object_r:nfc_device:s0 +/dev/mali[0-9]* u:object_r:gpu_device:s0 +/dev/umts_ipc0 u:object_r:radio_device:s0 +/dev/fimg2d u:object_r:video_device:s0 +/dev/sec-nfc u:object_r:nfc_device:s0 -/dev/cpuset(/.*)? u:object_r:cgroup:s0 +/dev/cpuset(/.*)? u:object_r:cgroup:s0 # camera -/dev/m2m1shot_scaler0 u:object_r:m2m1shot_device:s0 +/dev/m2m1shot_scaler0 u:object_r:m2m1shot_device:s0 # usb -/dev/android_ssusbcon(/.*)? u:object_r:usb_device:s0 -/dev/mtp_usb* u:object_r:mtp_device:s0 -/dev/usb(/.*)? u:object_r:usb_device:s0 +/dev/android_ssusbcon(/.*)? u:object_r:usb_device:s0 +/dev/mtp_usb* u:object_r:mtp_device:s0 +/dev/usb(/.*)? u:object_r:usb_device:s0 # adbroot and storaged -/dev/stune(/.*)? u:object_r:cgroup:s0 +/dev/stune(/.*)? u:object_r:cgroup:s0 -# zram -/dev/block/zram0 u:object_r:swap_block_device:s0 +# blocks +/dev/block/zram0 u:object_r:swap_block_device:s0 -/dev/block/platform/.+/by-name/(omr|OMR)? u:object_r:omr_block_device:s0 -/dev/block/platform/.+/by-name/(misc|MISC)? u:object_r:misc_block_device:s0 -/dev/block/platform/.+/by-name/(cpefs|CPEFS)? u:object_r:efs_block_device:s0 -/dev/block/platform/.+/by-name/(efs|EFS)? u:object_r:efs_block_device:s0 -/dev/block/platform/.+/by-name/(radio|RADIO)? u:object_r:radio_block_device:s0 -/dev/block/platform/.+/by-name/(cache|CACHE)? u:object_r:cache_block_device:s0 -/dev/block/platform/.+/by-name/(system|SYSTEM)? u:object_r:system_block_device:s0 -/dev/block/platform/.+/by-name/(userdata|USERDATA)? u:object_r:userdata_block_device:s0 -/dev/block/platform/.+/by-name/(keyrefuge|KEYREFUGE)? u:object_r:keyrefuge_block_device:s0 -/dev/block/platform/.+/by-name/(persistent|PERSISTENT)? u:object_r:frp_block_device:s0 +/dev/block/platform/.+/by-name/(omr|OMR)? u:object_r:omr_block_device:s0 +/dev/block/platform/.+/by-name/(misc|MISC)? u:object_r:misc_block_device:s0 +/dev/block/platform/.+/by-name/(cpefs|CPEFS)? u:object_r:efs_block_device:s0 +/dev/block/platform/.+/by-name/(efs|EFS)? u:object_r:efs_block_device:s0 +/dev/block/platform/.+/by-name/(radio|RADIO)? u:object_r:radio_block_device:s0 +/dev/block/platform/.+/by-name/(cache|CACHE)? u:object_r:cache_block_device:s0 +/dev/block/platform/.+/by-name/(system|SYSTEM)? u:object_r:system_block_device:s0 +/dev/block/platform/.+/by-name/(userdata|USERDATA)? u:object_r:userdata_block_device:s0 +/dev/block/platform/.+/by-name/(keyrefuge|KEYREFUGE)? u:object_r:keyrefuge_block_device:s0 +/dev/block/platform/.+/by-name/(persistent|PERSISTENT)? u:object_r:frp_block_device:s0 #################################### # efs -/mnt/vendor/cpefs(/.*)? u:object_r:efs_file:s0 +/mnt/vendor/cpefs(/.*)? u:object_r:efs_file:s0 #################################### # data files -/data/vendor/nfc(/.*)? u:object_r:nfc_vendor_data_file:s0 +/data/vendor/nfc(/.*)? u:object_r:nfc_vendor_data_file:s0 -/data/misc/radio(/.*)? u:object_r:radio_data_file:s0 +/data/misc/radio(/.*)? u:object_r:radio_data_file:s0 # drm -/data/vendor/mediadrm(/.*)? u:object_r:mediadrm_data_file:s0 - -# mobicore -/data/misc/mcRegistry(/.*)? u:object_r:mobicore_data_file:s0 +/data/vendor/mediadrm(/.*)? u:object_r:mediadrm_data_file:s0 # camera -/data/camera(/.*)? u:object_r:camera_data_file:s0 +/data/camera(/.*)? u:object_r:camera_data_file:s0 #################################### # sysfs files -/sys/class/power_supply/battery/music -- u:object_r:sysfs:s0 -/sys/class/devfreq/17000010.devfreq_mif(/.*)? -- u:object_r:sysfs:s0 # charger -/sys/devices/battery/power_supply(/.*) u:object_r:sysfs_charger:s0 -/sys/devices/platform/13840000\.i2c/i2c-10/10-003d/s2mu004-charger/power_supply/s2mu004-charger(/.*) u:object_r:sysfs_charger:s0 -/sys/devices/platform/13840000\.i2c/i2c-10/10-003d/s2mu004-charger/power_supply/otg(/.*)? u:object_r:sysfs_charger:s0 -/sys/devices/platform/13840000\.i2c/i2c-10/10-003d/s2mu004-charger/power_supply/s2mu004-charger(/.*)? u:object_r:sysfs_charger:s0 -/sys/devices/platform/13830000\.i2c/i2c-9/9-003b/power_supply/s2mu004-fuelgauge(/.*)? u:object_r:sysfs_charger:s0 -/sys/devices/platform/13840000\.i2c/i2c-10/10-003d/s2mu004-muic/power_supply/muic-manager(/.*)? u:object_r:sysfs_charger:s0 -/sys/devices/platform/13830000\.i2c/i2c-8/8-003b/power_supply/s2mu106-fuelgauge(/.*)? u:object_r:sysfs_charger:s0 -/sys/devices/platform/13830000\.i2c/i2c-8/8-003c/power_supply/s2mu106-usbpd(/.*)? u:object_r:sysfs_charger:s0 +/sys/devices/battery/power_supply(/.*) u:object_r:sysfs_charger:s0 +/sys/devices/platform/13840000\.i2c/i2c-10/10-003d/s2mu004-charger/power_supply/s2mu004-charger(/.*) u:object_r:sysfs_charger:s0 +/sys/devices/platform/13840000\.i2c/i2c-10/10-003d/s2mu004-charger/power_supply/otg(/.*)? u:object_r:sysfs_charger:s0 +/sys/devices/platform/13840000\.i2c/i2c-10/10-003d/s2mu004-charger/power_supply/s2mu004-charger(/.*)? u:object_r:sysfs_charger:s0 +/sys/devices/platform/13830000\.i2c/i2c-9/9-003b/power_supply/s2mu004-fuelgauge(/.*)? u:object_r:sysfs_charger:s0 +/sys/devices/platform/13840000\.i2c/i2c-10/10-003d/s2mu004-muic/power_supply/muic-manager(/.*)? u:object_r:sysfs_charger:s0 +/sys/devices/platform/13830000\.i2c/i2c-8/8-003b/power_supply/s2mu106-fuelgauge(/.*)? u:object_r:sysfs_charger:s0 +/sys/devices/platform/13830000\.i2c/i2c-8/8-003c/power_supply/s2mu106-usbpd(/.*)? u:object_r:sysfs_charger:s0 /sys/devices/platform/13840000\.i2c/i2c-9/9-003d/s2mu106-powermeter/power_supply/s2mu106_pmeter(/.*)? u:object_r:sysfs_charger:s0 -/sys/devices/platform/13840000\.i2c/i2c-9/9-003d/s2mu106-muic/power_supply/muic-manager(/.*)? u:object_r:sysfs_charger:s0 -/sys/devices/platform/13840000\.i2c/i2c-9/9-003d/s2mu106-charger/power_supply/otg(/.*)? u:object_r:sysfs_charger:s0 -/sys/devices/platform/13840000\.i2c/i2c-9/9-003d/s2mu106-charger/power_supply/s2mu106-charger(/.*)? u:object_r:sysfs_charger:s0 - -# sec -/sys/class/sec(/.*)? -- u:object_r:sysfs_sec:s0 +/sys/devices/platform/13840000\.i2c/i2c-9/9-003d/s2mu106-muic/power_supply/muic-manager(/.*)? u:object_r:sysfs_charger:s0 +/sys/devices/platform/13840000\.i2c/i2c-9/9-003d/s2mu106-charger/power_supply/otg(/.*)? u:object_r:sysfs_charger:s0 +/sys/devices/platform/13840000\.i2c/i2c-9/9-003d/s2mu106-charger/power_supply/s2mu106-charger(/.*)? u:object_r:sysfs_charger:s0 # virtual -/sys/devices/virtual(/.*)? u:object_r:sysfs_virtual:s0 +/sys/devices/virtual(/.*)? u:object_r:sysfs_virtual:s0 # iio -/sys/bus/iio/devices(/.*)? u:object_r:sysfs_iio:s0 +/sys/bus/iio/devices(/.*)? u:object_r:sysfs_iio:s0 # Backlight/Notification LED control -/sys/class/backlight/panel/brightness u:object_r:sysfs_graphics:s0 -/sys/class/backlight/panel/max_brightness u:object_r:sysfs_graphics:s0 +/sys/class/backlight/panel/brightness u:object_r:sysfs_graphics:s0 +/sys/class/backlight/panel/max_brightness u:object_r:sysfs_graphics:s0 # rild -/sys/devices/virtual/misc/multipdp(/.*) u:object_r:sysfs_multipdp:s0 +/sys/devices/virtual/misc/multipdp(/.*) u:object_r:sysfs_multipdp:s0 # input -/sys/devices/platform/gpio_keys/input/input12(/.*)? u:object_r:sysfs_input:s0 +/sys/devices/platform/gpio_keys/input/input12(/.*)? u:object_r:sysfs_input:s0 # modem -/sys/module/modem_ctrl_ss310ap/parameters/ds_detect u:object_r:sysfs_modem:s0 +/sys/module/modem_ctrl_ss310ap/parameters/ds_detect u:object_r:sysfs_modem:s0 # gps -/sys/devices/soc0/machine u:object_r:sysfs_sec_gps:s0 -/sys/devices/soc0/revision u:object_r:sysfs_sec_gps:s0 -/dev/gnss_ipc u:object_r:gps_device:s0 +/sys/devices/soc0/machine u:object_r:sysfs_sec_gps:s0 +/sys/devices/soc0/revision u:object_r:sysfs_sec_gps:s0 +/dev/gnss_ipc u:object_r:gps_device:s0 # bt -/dev/scsc_h4_0 u:object_r:bt_device:s0 +/dev/scsc_h4_0 u:object_r:bt_device:s0 # ZRAM -/sys/devices/virtual/block/zram0/mm_stat u:object_r:sysfs_zram:s0 +/sys/devices/virtual/block/zram0/mm_stat u:object_r:sysfs_zram:s0 ### VENDOR -/(vendor|system/vendor)/lib(64)?/hw/android\.hardware\.renderscript@[0-9]\.[0-9]-impl\.so u:object_r:same_process_hal_file:s0 -/(vendor|system/vendor)/lib(64)?/egl/libGLES_mali\.so u:object_r:same_process_hal_file:s0 /(vendor|system/vendor)/lib(64)?/hw/gralloc\.[a-z0-9]*\.so u:object_r:same_process_hal_file:s0 /(vendor|system/vendor)/lib(64)?/libion_exynos\.so u:object_r:same_process_hal_file:s0 -/(vendor|system/vendor)/lib(64)?/vulkan\.[a-z0-9]*\.so u:object_r:same_process_hal_file:s0 -/(vendor|system/vendor)/bin/main_abox u:object_r:abox_exec:s0 -/(vendor|system/vendor)/bin/wlbtd u:object_r:wlbtd_exec:s0 -/(vendor|system/vendor)/bin/hw/gpsd u:object_r:gpsd_exec:s0 -/(vendor|system/vendor)/bin/hw/macloader u:object_r:macloader_exec:s0 -/(vendor|system/vendor)/bin/mcDriverDaemon u:object_r:tee_exec:s0 +/(vendor|system/vendor)/bin/main_abox u:object_r:abox_exec:s0 +/(vendor|system/vendor)/bin/wlbtd u:object_r:wlbtd_exec:s0 +/(vendor|system/vendor)/bin/hw/gpsd u:object_r:gpsd_exec:s0 +/(vendor|system/vendor)/bin/hw/macloader u:object_r:macloader_exec:s0 +/(vendor|system/vendor)/bin/mcDriverDaemon u:object_r:tee_exec:s0 -/(vendor|system/vendor)/bin/hw/android\.hardware\.power@[0-9]\.[0-9]-service\.universal7904 u:object_r:hal_power_default_exec:s0 -/(vendor|system/vendor)/bin/hw/android\.hardware\.vibrator@[0-9]\.[0-9]-service\.samsung u:object_r:hal_vibrator_default_exec:s0 -/(vendor|system/vendor)/bin/hw/android\.hardware\.drm@[0-9]\.[0-9]-service\.clearkey u:object_r:hal_drm_clearkey_exec:s0 -/(vendor|system/vendor)/bin/hw/android\.hardware\.drm@[0-9]\.[0-9]-service\.widevine u:object_r:hal_drm_widevine_exec:s0 -/(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@[0-9]\.[0-9]-service\.samsung u:object_r:hal_keymaster_default_exec:s0 -/(vendor|system/vendor)/bin/hw/android\.hardware\.usb@[0-9]\.[0-9]-service\.basic u:object_r:hal_usb_default_exec:s0 -/(vendor|system/vendor)/bin/hw/android\.hardware\.nfc@[0-9]\.[0-9]-service.samsung u:object_r:hal_nfc_default_exec:s0 -/(vendor|system/vendor)/bin/hw/vendor\.samsung\.hardware\.gnss@[0-9]\.[0-9]-service u:object_r:hal_gnss_default_exec:s0 +/(vendor|system/vendor)/bin/hw/android\.hardware\.power@[0-9]\.[0-9]-service\.universal7904 u:object_r:hal_power_default_exec:s0 +/(vendor|system/vendor)/bin/hw/android\.hardware\.vibrator@[0-9]\.[0-9]-service\.samsung u:object_r:hal_vibrator_default_exec:s0 +/(vendor|system/vendor)/bin/hw/android\.hardware\.drm@[0-9]\.[0-9]-service\.clearkey u:object_r:hal_drm_clearkey_exec:s0 +/(vendor|system/vendor)/bin/hw/android\.hardware\.drm@[0-9]\.[0-9]-service\.widevine u:object_r:hal_drm_widevine_exec:s0 +/(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@[0-9]\.[0-9]-service\.samsung u:object_r:hal_keymaster_default_exec:s0 +/(vendor|system/vendor)/bin/hw/android\.hardware\.nfc@[0-9]\.[0-9]-service\.samsung u:object_r:hal_nfc_default_exec:s0 +/(vendor|system/vendor)/bin/hw/vendor\.samsung\.hardware\.gnss@[0-9]\.[0-9]-service u:object_r:hal_gnss_default_exec:s0 diff --git a/sepolicy/vendor/hwservice.te b/sepolicy/vendor/hwservice.te index c96ce33..699ccce 100644 --- a/sepolicy/vendor/hwservice.te +++ b/sepolicy/vendor/hwservice.te @@ -1,7 +1,3 @@ type hal_sec_radio_hwservice, hwservice_manager_type; type hal_sec_radio_bridge_hwservice, hwservice_manager_type; type hal_sec_radio_channel_hwservice, hwservice_manager_type; - -type hal_vendor_eden_runtime_hwservice, hwservice_manager_type; -type hal_vendor_multiframeprocessing_hwservice, hwservice_manager_type; -type hal_vendor_iva_hwservice, hwservice_manager_type; diff --git a/sepolicy/vendor/hwservice_contexts b/sepolicy/vendor/hwservice_contexts index 1495202..523b607 100644 --- a/sepolicy/vendor/hwservice_contexts +++ b/sepolicy/vendor/hwservice_contexts @@ -1,10 +1,4 @@ +vendor.samsung.hardware.gnss::ISehGnss u:object_r:hal_gnss_hwservice:s0 vendor.samsung.hardware.radio::ISehRadio u:object_r:hal_sec_radio_hwservice:s0 vendor.samsung.hardware.radio.bridge::ISehBridge u:object_r:hal_sec_radio_bridge_hwservice:s0 vendor.samsung.hardware.radio.channel::ISehChannel u:object_r:hal_sec_radio_channel_hwservice:s0 - -vendor.samsung.hardware.camera.provider::ISehCameraProvider u:object_r:hal_camera_hwservice:s0 -vendor.samsung.hardware.gnss::ISehGnss u:object_r:hal_gnss_hwservice:s0 -vendor.samsung.hardware.nfc::ISecNfc u:object_r:hal_nfc_hwservice:s0 -vendor.samsung_slsi.hardware.MultiFrameProcessing20::IMultiFrameProcessing20 u:object_r:hal_vendor_multiframeprocessing_hwservice:s0 -vendor.samsung_slsi.hardware.eden_runtime::IEdenruntime u:object_r:hal_vendor_eden_runtime_hwservice:s0 -vendor.samsung_slsi.hardware.iva::IIvaService u:object_r:hal_vendor_iva_hwservice:s0