bunnypad/android_device_samsung_a20
Watch
1
0
Fork
You've already forked android_device_samsung_a20
 0
mirror of https://github.com/chararomandroid/android_device_samsung_a20 synced 2026-08-22 12:05:32 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

universal7885: sepolicy: Remove mobicore and trustonic HAL rules from here

Browse source 
* Moved to common slsi sepolicy

Signed-off-by: SamarV-121 <samarvispute121@gmail.com>
Change-Id: I204b0eaad014f97166180b17678277c48a851491
This commit is contained in:
SamarV-121 2021-07-15 22:49:18 +05:30 • committed by roynatech2544
commit 6cfb2d5778
12 changed files with 0 additions and 71 deletions
Download patch file Download diff file Expand all files Collapse all files

6
sepolicy/vendor/attributes vendored
View file

@ -1,6 +0,0 @@
attribute hal_tee_client;
attribute hal_tee_server;
attribute hal_tee;
attribute hal_teeregistry_client;
attribute hal_teeregistry_server;
attribute hal_teeregistry;

2
sepolicy/vendor/device.te vendored
View file

@ -12,5 +12,3 @@ type m2m1shot_device, dev_type;
# gps
type gps_device, dev_type;
type mobicore_vendor_file, dev_type;

6
sepolicy/vendor/file_contexts vendored
View file

@ -65,7 +65,6 @@
# mobicore
/data/misc/mcRegistry(/.*)? u:object_r:mobicore_data_file:s0
/data/vendor/mcRegistry(/.*)? u:object_r:mobicore_vendor_data_file:s0
# camera
/data/camera(/.*)? u:object_r:camera_data_file:s0
@ -126,9 +125,6 @@
/(vendor|system/vendor)/lib(64)?/libion_exynos\.so u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib(64)?/vulkan\.[a-z0-9]*\.so u:object_r:same_process_hal_file:s0
/(vendor|system\/vendor)/app/mcRegistry(/.*)? u:object_r:mobicore_vendor_file:s0
/(vendor|system/vendor)/bin/main_abox u:object_r:abox_exec:s0
/(vendor|system/vendor)/bin/wlbtd u:object_r:wlbtd_exec:s0
/(vendor|system/vendor)/bin/hw/gpsd u:object_r:gpsd_exec:s0
@ -143,5 +139,3 @@
/(vendor|system/vendor)/bin/hw/android\.hardware\.usb@[0-9]\.[0-9]-service\.basic u:object_r:hal_usb_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.nfc@[0-9]\.[0-9]-service.samsung u:object_r:hal_nfc_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.samsung\.hardware\.gnss@[0-9]\.[0-9]-service u:object_r:hal_gnss_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.trustonic\.tee@[0-9]\.[0-9]-service u:object_r:hal_tee_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.trustonic\.teeregistry@[0-9]\.[0-9]-service u:object_r:hal_teeregistry_default_exec:s0

2
sepolicy/vendor/hal_fingerprint_default.te vendored
View file

@ -4,5 +4,3 @@ allow hal_fingerprint_default fingerprintd_data_file:dir write;
allow hal_fingerprint_default fingerprint_device:chr_file rw_file_perms;
allow hal_fingerprint_default sysfs_virtual:dir search;
allow hal_fingerprint_default sysfs_virtual:file r_file_perms;
allow hal_fingerprint_default mobicore_vendor_file:file r_file_perms;
allow hal_fingerprint_default mobicore_vendor_file:dir search;

2
sepolicy/vendor/hal_gatekeeper_default.te vendored
View file

@ -2,6 +2,4 @@ allow hal_gatekeeper_default gatekeeper_efs_file:file rw_file_perms;
allow hal_gatekeeper_default gatekeeper_efs_file:dir search;
allow hal_gatekeeper_default efs_file:dir search;
allow hal_gatekeeper_default efs_file:file rw_file_perms;
allow hal_gatekeeper_default mobicore_vendor_file:dir search;
allow hal_gatekeeper_default mobicore_vendor_file:file rw_file_perms;
allow hal_gatekeeper_default mnt_vendor_file:dir search;

2
sepolicy/vendor/hal_keymaster_default.te vendored
View file

@ -1,2 +0,0 @@
allow hal_keymaster_default mobicore_vendor_file:dir search;
allow hal_keymaster_default mobicore_vendor_file:file rw_file_perms;

17
sepolicy/vendor/hal_tee_default.te vendored
View file

@ -1,17 +0,0 @@
type hal_tee_default, domain;
type hal_tee_default_exec, exec_type, vendor_file_type, file_type;
binder_call(hal_tee_client, hal_tee_server)
binder_call(hal_tee_server, hal_tee_client)
add_hwservice(hal_tee_server, hal_tee_hwservice)
allow hal_tee_client hal_tee_hwservice:hwservice_manager find;
init_daemon_domain(hal_tee_default);
hal_server_domain(hal_tee_default, hal_tee)
hal_client_domain(hal_tee_default, hal_allocator)
allow hal_tee_default hidl_memory_hwservice:hwservice_manager find;
allow hal_tee_default tee_device:chr_file rw_file_perms;

21
sepolicy/vendor/hal_teeregistry_default.te vendored
View file

@ -1,21 +0,0 @@
type hal_teeregistry_default, domain;
type hal_teeregistry_default_exec, exec_type, vendor_file_type, file_type;
binder_call(hal_teeregistry_client, hal_teeregistry_server)
binder_call(hal_teeregistry_server, hal_teeregistry_client)
add_hwservice(hal_teeregistry_server, hal_teeregistry_hwservice)
allow hal_teeregistry_client hal_teeregistry_hwservice:hwservice_manager find;
hal_server_domain(hal_teeregistry_default, hal_teeregistry)
hal_client_domain(hal_teeregistry_default, hal_allocator)
allow hal_teeregistry_default hidl_memory_hwservice:hwservice_manager find;
allow hal_teeregistry_default tee_device:chr_file rw_file_perms;
allow hal_teeregistry_default mobicore_vendor_data_file:dir { rw_dir_perms create rename rmdir };
allow hal_teeregistry_default mobicore_vendor_data_file:file { rw_file_perms rename create };
allow hal_teeregistry_default mobicore_vendor_file:file { r_file_perms };
init_daemon_domain(hal_teeregistry_default);

3
sepolicy/vendor/hwservice.te vendored
View file

@ -5,6 +5,3 @@ type hal_sec_radio_channel_hwservice, hwservice_manager_type;
type hal_vendor_eden_runtime_hwservice, hwservice_manager_type;
type hal_vendor_multiframeprocessing_hwservice, hwservice_manager_type;
type hal_vendor_iva_hwservice, hwservice_manager_type;
type hal_tee_hwservice, hwservice_manager_type;
type hal_teeregistry_hwservice, hwservice_manager_type;

4
sepolicy/vendor/hwservice_contexts vendored
View file

@ -8,7 +8,3 @@ vendor.samsung.hardware.nfc::ISecNfc u:object_r:hal_nfc_h
vendor.samsung_slsi.hardware.MultiFrameProcessing20::IMultiFrameProcessing20 u:object_r:hal_vendor_multiframeprocessing_hwservice:s0
vendor.samsung_slsi.hardware.eden_runtime::IEdenruntime u:object_r:hal_vendor_eden_runtime_hwservice:s0
vendor.samsung_slsi.hardware.iva::IIvaService u:object_r:hal_vendor_iva_hwservice:s0
vendor.trustonic.tee::ITee u:object_r:hal_tee_hwservice:s0
vendor.trustonic.tee.tui::ITui u:object_r:hal_tee_hwservice:s0
vendor.trustonic.teeregistry::ITeeRegistry u:object_r:hal_teeregistry_hwservice:s0

1
sepolicy/vendor/system_server.te vendored
View file

@ -9,7 +9,6 @@ allow system_server debugfs_mali_mem:file r_file_perms;
allow system_server frp_block_device:blk_file rw_file_perms;
allow system_server mobicore_vendor_file:dir r_dir_perms;
allow system_server sysfs_rtc:file r_file_perms;
get_prop(system_server, vendor_radio_prop)

5
sepolicy/vendor/tee.te vendored
View file

@ -1,9 +1,4 @@
allow tee efs_file:dir r_dir_perms;
allow tee mnt_vendor_file:dir search;
allow tee mobicore_vendor_data_file:dir create_dir_perms;
allow tee mobicore_vendor_data_file:file create_file_perms;
r_dir_file(tee, mobicore_vendor_file)
set_prop(tee, system_prop)