universal7885: work on sepolicy

* Allow system app to ioctl to FM Radio device
* import some missing samsung vendor bins

Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
This commit is contained in:
roynatech2544 2021-12-29 17:57:59 +09:00
commit 53b426b522
No known key found for this signature in database
GPG key ID: 9675C32163D88D30
6 changed files with 26 additions and 3 deletions

View file

@ -5,6 +5,9 @@ type tz_user_device, dev_type;
# /dev/m2m1shot_scaler0
type m2m1shot_device, dev_type;
# FM Radio
type fm_radio_device, dev_type;
# gps
type gps_device, dev_type;

View file

@ -200,9 +200,6 @@
/data/camera(/.*)? u:object_r:camera_data_file:s0
####################################
### CACHE
/cache/boot_log.txt u:object_r:boot_logcat_file:s0
### VENDOR
/(vendor|system/vendor)/lib(64)?/hw/gralloc\.exynos7884B\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib(64)?/hw/gralloc\.exynos7904\.so u:object_r:same_process_hal_file:s0
@ -232,3 +229,10 @@
/(vendor|system/vendor)/bin/hw/vendor\.eureka\.hardware\.flashlight@1\.0-service u:object_r:hal_flashlight_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.eureka\.hardware\.gpu@1\.0-service u:object_r:hal_gpu_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.eureka\.security\.selinux@1\.0-service u:object_r:hal_selinux_default_exec:s0
/dev/radio0 u:object_r:fm_radio_device:s0
/vendor/bin/iof_vendor u:object_r:iof_vendor_exec:s0
/vendor/bin/proxy_daemon u:object_r:proxy_daemon_exec:s0
/vendor/bin/taadaemon u:object_r:taadaemon_exec:s0

View file

@ -0,0 +1,4 @@
type iof_vendor, domain;
type iof_vendor_exec, file_type, vendor_file_type, exec_type;
init_daemon_domain(iof_vendor)

View file

@ -0,0 +1,4 @@
type proxy_daemon, domain;
type proxy_daemon_exec, file_type, vendor_file_type, exec_type;
init_daemon_domain(proxy_daemon)

View file

@ -22,3 +22,7 @@ allow system_app hal_battery_default:binder call;
allow system_app hal_flashlight_default:binder call;
allow system_app hal_selinux_default:binder call;
allow system_app hal_gpu_default:binder call;
allow system_app fm_radio_device:chr_file { read write open ioctl };

View file

@ -0,0 +1,4 @@
type taadaemon, domain;
type taadaemon_exec, file_type, vendor_file_type, exec_type;
init_daemon_domain(taadaemon)