bunnypad/android_device_samsung_a20
Watch
1
0
Fork
You've already forked android_device_samsung_a20
 0
mirror of https://github.com/chararomandroid/android_device_samsung_a20 synced 2026-08-21 11:55:31 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

universal7885: Add some rules to make ds work on enforcing

Browse source
This commit is contained in:
Kevios12 2021-12-01 00:53:59 +00:00 • committed by roynatech2544
commit 62b750c2e9
No known key found for this signature in database
GPG key ID: 9675C32163D88D30
12 changed files with 14 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files

2
a20e/AndroidProducts.mk
View file

@ -1,2 +0,0 @@
# Auto-Generated by device/samsung/a20e/setup.sh
PRODUCT_MAKEFILES += $(LOCAL_DIR)/aosp_a20e.mk

25
universal7885-common/sepolicy/vendor/argosd.te vendored
View file

@ -1,25 +0,0 @@
# argosd.te
type argosd, domain;
type argosd_exec, exec_type, vendor_file_type, file_type;
# argosd is started by init, type transit from init domain to gpsd domain
init_daemon_domain(argosd)
# /dev/network_throughput
allow argosd radio_qos_device:chr_file rw_file_perms;
# /proc/net/dev
allow argosd proc_net:file r_file_perms;
# /sys/
allow argosd sysfs:dir r_dir_perms;
# /sys/devices/platform/argos
# /sys/firmware/devicetree/base/argos
allow argosd sysfs_argos:dir r_dir_perms;
allow argosd sysfs_argos:file r_file_perms;
# /sys/class/scsi_host/host0
allow argosd sysfs_scsi_host_writable:dir r_dir_perms;
allow argosd sysfs_scsi_host_writable:file r_file_perms;

7
universal7885-common/sepolicy/vendor/fastbootd.te vendored
View file

@ -1,7 +0,0 @@
# fastbootd.te
allow fastbootd {
boot_block_device
dtbo_block_device
recovery_block_device
}:blk_file rw_file_perms;

2
universal7885-common/sepolicy/vendor/gpsd.te vendored
View file

@ -7,6 +7,8 @@ init_daemon_domain(gpsd)
allow gpsd rild:unix_stream_socket connectto;
get_prop(gpsd, vendor_radio_prop)
allow gpsd system_data_file:dir search;
get_prop(gpsd, telephony_config_prop)
get_prop(gpsd, exported_config_prop)

1
universal7885-common/sepolicy/vendor/hal_power_default.te vendored
View file

@ -33,3 +33,4 @@ allow hal_power_default sysfs_sec_touchscreen:dir { read open };
allow hal_power_default sysfs_sec_touchscreen:file r_file_perms;
type hal_lineage_power_hwservice, hwservice_manager_type;
add_hwservice(hal_power_default, hal_power_hwservice)
allow hal_power_default sysfs_decon:dir search;

4
universal7885-common/sepolicy/vendor/property_contexts vendored
View file

@ -3,7 +3,7 @@ vendor.cbd. u:object_r:vendor_cbd_prop:s0
persist.vendor.cbd. u:object_r:vendor_radio_prop:s0
### radio
ro.multisim. u:object_r:vendor_radio_prop:s0
ro.multisim. u:object_r:radio_prop:s0
ro.vendor.multisim. u:object_r:vendor_radio_prop:s0
ro.vendor.radio. u:object_r:vendor_radio_prop:s0
@ -39,6 +39,8 @@ vendor.nfc.fw. u:object_r:vendor_nfc_prop:s0
# RADIO
persist.ril. u:object_r:radio_prop:s0
vendor.gsm. u:object_r:vendor_radio_prop:s0
persist.radio. u:object_r:radio_prop:s0
ril.clatd. u:object_r:vendor_radio_prop:s0
# FACTORY
ro.factory.factory_binary u:object_r:vendor_factory_prop:s0

2
universal7885-common/sepolicy/vendor/radio.te vendored
View file

@ -1 +1,3 @@
binder_call(radio, gpuservice)
get_prop(radio, radio_prop)

2
universal7885-common/sepolicy/vendor/rild.te vendored
View file

@ -64,6 +64,7 @@ get_prop(rild, exported_config_prop);
# ro.boot.cpboot, ril.NwNmId[0-9]
get_prop(rild, telephony_config_prop)
get_prop(rild, vendor_radio_prop)
# vendor.cbd.
set_prop(rild, vendor_cbd_prop)
allow rild proc_net:file write;
@ -92,3 +93,4 @@ allow rild hal_audio_default:dir search;
allow rild hal_audio_default:file r_file_perms;
# hwservice
add_hwservice(rild, rild_hwservice)
set_prop(rild, radio_prop)

1
universal7885-common/sepolicy/vendor/secril_config_svc.te vendored
View file

@ -20,3 +20,4 @@ allow secril_config_svc efs_file:file r_file_perms;
set_prop(secril_config_svc, vendor_radio_prop)
dontaudit secril_config_svc radio_control_prop:property_service set;
get_prop(secril_config_svc, exported_config_prop)
get_prop(secril_config_svc, vendor_radio_prop)

2
universal7885-common/sepolicy/vendor/vendor_init.te vendored
View file

@ -16,4 +16,4 @@ set_prop(vendor_init, persist_data_df_prop)
set_prop(vendor_init, persist_data_wda_prop)
set_prop(vendor_init, persist_rmnet_prop)
get_prop(vendor_init, system_prop)
get_prop(vendor_init, vendor_radio_prop)

2
universal7885-common/vendor_detect/main.py
View file

@ -5,7 +5,7 @@ parser.add_argument("-d", help="Debug", type=int)
args = parser.parse_args()
var = vars(args)
DEBUG = var['d'] == 1
blacklist = ["qcom", "nxp","pixel-framework" ,"samsung", "gapps", "google", "gms", "codeaurora"]
blacklist = ["qcom", "nxp","pixel-framework" ,"support", "overlay","samsung", "gapps", "google", "gms", "codeaurora"]
vendors = os.listdir("vendor")
for vendor in vendors:
if DEBUG:

2
universal7885-common/vendor_name
View file

@ -1 +1 @@
aosp
derp