mirror of
https://github.com/chararomandroid/android_device_samsung_a20
synced 2026-08-24 04:45:32 -04:00
universal7885: Adapt SELinux rules to match our A20/A20e's needs
* Additionally, adapt LineageOS's rules too Change-Id: Ie253afd9052c700705861d618253445ef4b8c728 Signed-off-by: roynatech2544 <whiteshell2544@naver.com>
This commit is contained in:
roynatech2544
parent
90eb28369e
commit
9506c382c4
82 changed files with 1108 additions and 98 deletions
2
universal7885-common/sepolicy/vendor/app.te
vendored
2
universal7885-common/sepolicy/vendor/app.te
vendored
|
|
@ -1 +1 @@
|
|||
get_prop(appdomain, exported_camera_prop);
|
||||
get_prop(appdomain, exported_camera_prop)
|
||||
|
|
|
|||
|
|
@ -1 +1,2 @@
|
|||
get_prop(bootanim, userspace_reboot_exported_prop)
|
||||
allow bootanim system_data_file:dir read;
|
||||
|
|
|
|||
|
|
@ -1,4 +1,5 @@
|
|||
get_prop(crash_dump, hwservicemanager_prop)
|
||||
get_prop(crash_dump, exported_camera_prop)
|
||||
#get_prop(crash_dump, vendor_default_prop)
|
||||
|
||||
allow crash_dump app_data_file:file read;
|
||||
|
|
|
|||
8
universal7885-common/sepolicy/vendor/file.te
vendored
8
universal7885-common/sepolicy/vendor/file.te
vendored
|
|
@ -14,6 +14,9 @@ type debugfs_mali_mem, fs_type, debugfs_type;
|
|||
type debugfs_ion, fs_type, debugfs_type;
|
||||
type debugfs_ion_dma, fs_type, debugfs_type;
|
||||
|
||||
# cache
|
||||
type boot_logcat_file, file_type, data_file_type;
|
||||
|
||||
# proc
|
||||
type proc_extra, fs_type, proc_type;
|
||||
type proc_reset_reason, fs_type, proc_type;
|
||||
|
|
@ -26,7 +29,11 @@ type mediadrm_data_file, file_type, data_file_type;
|
|||
type nfc_vendor_data_file, file_type, data_file_type;
|
||||
|
||||
# sysfs types
|
||||
type sysfs_battery_info, sysfs_type, fs_type;
|
||||
type sysfs_battery_supply, sysfs_type, rw_fs_type, fs_type;
|
||||
type sysfs_abox_writable, sysfs_type, rw_fs_type, fs_type;
|
||||
type sysfs_sensor_writable, sysfs_type, rw_fs_type, fs_type;
|
||||
type sysfs_input_writable, sysfs_type, rw_fs_type, fs_type;
|
||||
type sysfs_batteryinfo_charger_writable, sysfs_type, rw_fs_type, fs_type;
|
||||
type sysfs_camera_writable, sysfs_type, rw_fs_type, fs_type;
|
||||
type sysfs_decon, sysfs_type, r_fs_type, fs_type;
|
||||
|
|
@ -42,6 +49,7 @@ type sysfs_sec, fs_type, sysfs_type, mlstrustedobject;
|
|||
type sysfs_gps, fs_type, sysfs_type, mlstrustedobject;
|
||||
type sysfs_brightness, fs_type, sysfs_type, mlstrustedobject;
|
||||
type sysfs_virtual, fs_type, sysfs_type, mlstrustedobject;
|
||||
type sysfs_fuelgauge, fs_type, sysfs_type, mlstrustedobject;
|
||||
type sysfs_charger, fs_type, sysfs_type, mlstrustedobject;
|
||||
type sysfs_modem, fs_type, sysfs_type, mlstrustedobject;
|
||||
type sysfs_camera, fs_type, sysfs_type, mlstrustedobject;
|
||||
|
|
|
|||
|
|
@ -4,8 +4,9 @@
|
|||
/dev/umts_ipc0 u:object_r:radio_device:s0
|
||||
/dev/fimg2d u:object_r:video_device:s0
|
||||
/dev/sec-nfc u:object_r:nfc_device:s0
|
||||
/dev/goodix_fp u:object_r:goodix_device:s0
|
||||
|
||||
/dev/esfp0 u:object_r:goodix_device:s0
|
||||
/dev/gnss_ipc u:object_r:gps_device:s0
|
||||
/dev/scsc_h4_0 u:object_r:bt_device:s0
|
||||
/dev/cpuset(/.*)? u:object_r:cgroup:s0
|
||||
|
||||
# camera
|
||||
|
|
@ -42,9 +43,6 @@
|
|||
####################################
|
||||
# data files
|
||||
/data/vendor/nfc(/.*)? u:object_r:nfc_vendor_data_file:s0
|
||||
|
||||
/data/misc/radio(/.*)? u:object_r:radio_data_file:s0
|
||||
|
||||
# drm
|
||||
/data/vendor/mediadrm(/.*)? u:object_r:mediadrm_data_file:s0
|
||||
|
||||
|
|
@ -52,66 +50,23 @@
|
|||
/data/camera(/.*)? u:object_r:camera_data_file:s0
|
||||
|
||||
####################################
|
||||
# sysfs files
|
||||
|
||||
# charger
|
||||
/sys/devices/battery/power_supply(/.*) u:object_r:sysfs_charger:s0
|
||||
/sys/devices/platform/13840000\.i2c/i2c-10/10-003d/s2mu004-charger/power_supply/s2mu004-charger(/.*) u:object_r:sysfs_charger:s0
|
||||
/sys/devices/platform/13840000\.i2c/i2c-10/10-003d/s2mu004-charger/power_supply/otg(/.*)? u:object_r:sysfs_charger:s0
|
||||
/sys/devices/platform/13840000\.i2c/i2c-10/10-003d/s2mu004-charger/power_supply/s2mu004-charger(/.*)? u:object_r:sysfs_charger:s0
|
||||
/sys/devices/platform/13830000\.i2c/i2c-9/9-003b/power_supply/s2mu004-fuelgauge(/.*)? u:object_r:sysfs_charger:s0
|
||||
/sys/devices/platform/13840000\.i2c/i2c-10/10-003d/s2mu004-muic/power_supply/muic-manager(/.*)? u:object_r:sysfs_charger:s0
|
||||
/sys/devices/platform/13830000\.i2c/i2c-8/8-003b/power_supply/s2mu106-fuelgauge(/.*)? u:object_r:sysfs_charger:s0
|
||||
/sys/devices/platform/13830000\.i2c/i2c-8/8-003c/power_supply/s2mu106-usbpd(/.*)? u:object_r:sysfs_charger:s0
|
||||
/sys/devices/platform/13840000\.i2c/i2c-9/9-003d/s2mu106-powermeter/power_supply/s2mu106_pmeter(/.*)? u:object_r:sysfs_charger:s0
|
||||
/sys/devices/platform/13840000\.i2c/i2c-9/9-003d/s2mu106-muic/power_supply/muic-manager(/.*)? u:object_r:sysfs_charger:s0
|
||||
/sys/devices/platform/13840000\.i2c/i2c-9/9-003d/s2mu106-charger/power_supply/otg(/.*)? u:object_r:sysfs_charger:s0
|
||||
/sys/devices/platform/13840000\.i2c/i2c-9/9-003d/s2mu106-charger/power_supply/s2mu106-charger(/.*)? u:object_r:sysfs_charger:s0
|
||||
|
||||
# virtual
|
||||
/sys/devices/virtual(/.*)? u:object_r:sysfs_virtual:s0
|
||||
|
||||
# iio
|
||||
/sys/bus/iio/devices(/.*)? u:object_r:sysfs_iio:s0
|
||||
|
||||
# Backlight/Notification LED control
|
||||
/sys/class/backlight/panel/brightness u:object_r:sysfs_graphics:s0
|
||||
/sys/class/backlight/panel/max_brightness u:object_r:sysfs_graphics:s0
|
||||
|
||||
# rild
|
||||
/sys/devices/virtual/misc/multipdp(/.*) u:object_r:sysfs_multipdp:s0
|
||||
|
||||
# input
|
||||
/sys/devices/platform/gpio_keys/input/input12(/.*)? u:object_r:sysfs_input:s0
|
||||
|
||||
# modem
|
||||
/sys/module/modem_ctrl_ss310ap/parameters/ds_detect u:object_r:sysfs_modem:s0
|
||||
|
||||
# gps
|
||||
/sys/devices/soc0/machine u:object_r:sysfs_sec_gps:s0
|
||||
/sys/devices/soc0/revision u:object_r:sysfs_sec_gps:s0
|
||||
/dev/gnss_ipc u:object_r:gps_device:s0
|
||||
|
||||
# bt
|
||||
/dev/scsc_h4_0 u:object_r:bt_device:s0
|
||||
|
||||
# ZRAM
|
||||
/sys/devices/virtual/block/zram0/mm_stat u:object_r:sysfs_zram:s0
|
||||
### CACHE
|
||||
/cache/boot_log.txt u:object_r:boot_logcat_file:s0
|
||||
|
||||
### VENDOR
|
||||
/(vendor|system/vendor)/lib(64)?/hw/gralloc\.[a-z0-9]*\.so u:object_r:same_process_hal_file:s0
|
||||
/(vendor|system/vendor)/lib(64)?/hw/gralloc\.exynos7884B\.so u:object_r:same_process_hal_file:s0
|
||||
/(vendor|system/vendor)/lib(64)?/libion_exynos\.so u:object_r:same_process_hal_file:s0
|
||||
|
||||
/(vendor|system/vendor)/bin/main_abox u:object_r:abox_exec:s0
|
||||
/(vendor|system/vendor)/bin/wlbtd u:object_r:wlbtd_exec:s0
|
||||
/(vendor|system/vendor)/bin/hw/gpsd u:object_r:gpsd_exec:s0
|
||||
/(vendor|system/vendor)/bin/hw/macloader u:object_r:macloader_exec:s0
|
||||
/(vendor|system/vendor)/bin/mcDriverDaemon u:object_r:tee_exec:s0
|
||||
|
||||
/(vendor|system/vendor)/bin/hw/android\.hardware\.power@[0-9]\.[0-9]-service\.universal7884B u:object_r:hal_power_default_exec:s0
|
||||
/(vendor|system/vendor)/bin/hw/android\.hardware\.power\.stats@[0-9]\.[0-9]-service\.mock u:object_r:hal_power_stats_default_exec:s0
|
||||
/(vendor|system/vendor)/bin/hw/android\.hardware\.vibrator@[0-9]\.[0-9]-service\.samsung u:object_r:hal_vibrator_default_exec:s0
|
||||
/(vendor|system/vendor)/bin/hw/android\.hardware\.drm@[0-9]\.[0-9]-service\.clearkey u:object_r:hal_drm_clearkey_exec:s0
|
||||
/(vendor|system/vendor)/bin/hw/android\.hardware\.drm@[0-9]\.[0-9]-service\.widevine u:object_r:hal_drm_widevine_exec:s0
|
||||
/(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@[0-9]\.[0-9]-service\.samsung u:object_r:hal_keymaster_default_exec:s0
|
||||
/(vendor|system/vendor)/bin/hw/android\.hardware\.nfc@[0-9]\.[0-9]-service\.samsung u:object_r:hal_nfc_default_exec:s0
|
||||
/(vendor|system/vendor)/bin/hw/android\.hardware\.usb@[0-9]\.[0-9]-service\.exynos7884B u:object_r:hal_usb_default_exec:s0
|
||||
/(vendor|system/vendor)/bin/hw/vendor\.samsung\.hardware\.gnss@[0-9]\.[0-9]-service u:object_r:hal_gnss_default_exec:s0
|
||||
|
|
|
|||
|
|
@ -14,16 +14,44 @@ genfscon proc /sys/vm/swappiness u:object_r:proc_swapiness:s0
|
|||
# SYSFS
|
||||
|
||||
# class
|
||||
genfscon sysfs /class/video4linux u:object_r:sysfs_v4l:s0
|
||||
genfscon sysfs /class/input/input1 u:object_r:sysfs_input:s0
|
||||
genfscon sysfs /class/video4linux u:object_r:sysfs_v4l:s0
|
||||
genfscon sysfs /class/input/input1 u:object_r:sysfs_input:s0
|
||||
genfscon sysfs /class/backlight/panel/brightness u:object_r:sysfs_graphics:s0
|
||||
genfscon sysfs /class/backlight/panel/max_brightness u:object_r:sysfs_graphics:s0
|
||||
|
||||
# battery
|
||||
genfscon sysfs /class/power_supply/battery/ u:object_r:sysfs_battery_info:s0
|
||||
|
||||
# devices
|
||||
genfscon sysfs /devices/virtual u:object_r:sysfs_virtual:s0
|
||||
genfscon sysfs /devices/virtual/misc/multipdp u:object_r:sysfs_multipdp:s0
|
||||
genfscon sysfs /devices/virtual/sensors/sensor_dev/flush u:object_r:sysfs_sensor_writable:s0
|
||||
genfscon sysfs /devices/virtual/input/input2/enable u:object_r:sysfs_input_writable:s0
|
||||
genfscon sysfs /devices/virtual/input/input3/enable u:object_r:sysfs_input_writable:s0
|
||||
genfscon sysfs /devices/virtual/input/input4/enable u:object_r:sysfs_input_writable:s0
|
||||
genfscon sysfs /devices/virtual/input/input5/enable u:object_r:sysfs_input_writable:s0
|
||||
genfscon sysfs /devices/virtual/input/input6/enable u:object_r:sysfs_input_writable:s0
|
||||
genfscon sysfs /devices/virtual/input/input7/enable u:object_r:sysfs_input_writable:s0
|
||||
genfscon sysfs /devices/virtual/input/input8/enable u:object_r:sysfs_input_writable:s0
|
||||
genfscon sysfs /devices/virtual/input/input9/enable u:object_r:sysfs_input_writable:s0
|
||||
genfscon sysfs /devices/virtual/input/input10/enable u:object_r:sysfs_input_writable:s0
|
||||
genfscon sysfs /devices/virtual/input/input2/poll_delay u:object_r:sysfs_input_writable:s0
|
||||
genfscon sysfs /devices/virtual/input/input3/poll_delay u:object_r:sysfs_input_writable:s0
|
||||
genfscon sysfs /devices/virtual/input/input8/poll_delay u:object_r:sysfs_input_writable:s0
|
||||
genfscon sysfs /devices/platform/gpio_keys/input/input12 u:object_r:sysfs_input:s0
|
||||
genfscon sysfs /devices/platform/flip_cover/input/input13 u:object_r:sysfs_input:s0
|
||||
genfscon sysfs /devices/platform/10000.mif_pdata/sim/ds_detect u:object_r:sysfs_sim_writable:s0
|
||||
genfscon sysfs /module/scsc_bt/parameters/bluetooth_address u:object_r:sysfs_bt_writable:s0
|
||||
genfscon sysfs /devices/platform/11ce0000.speedy/i2c-7/7-0000/s2mpu08-rtc/rtc u:object_r:sysfs_rtc:s0
|
||||
# A20e RTC
|
||||
genfscon sysfs /devices/platform/11ce0000.speedy/i2c-5/5-0000/s2mpu08-rtc/rtc u:object_r:sysfs_rtc:s0
|
||||
# A20 RTC
|
||||
genfscon sysfs /devices/platform/11ce0000.speedy/i2c-6/6-0000/s2mpu08-rtc/rtc u:object_r:sysfs_rtc:s0
|
||||
genfscon sysfs /devices/platform/11ce0000.speedy/i2c-7/7-0003/input/input11 u:object_r:sysfs_touchscreen_writable:s0
|
||||
genfscon sysfs /devices/platform/13930000.hsi2c/i2c-5/5-0048/input/ u:object_r:sysfs_touchscreen_writable:s0
|
||||
|
||||
# A20e Display
|
||||
genfscon sysfs /devices/platform/13870000.i2c/i2c-11/11-0048/input/ u:object_r:sysfs_touchscreen_writable:s0
|
||||
genfscon sysfs /devices/platform/11ce0000.speedy/i2c-5/5-0003/input/input11 u:object_r:sysfs_touchscreen_writable:s0
|
||||
# A20 Display
|
||||
genfscon sysfs /devices/platform/13870000.i2c/i2c-11/11-0020/input/ u:object_r:sysfs_touchscreen_writable:s0
|
||||
|
||||
genfscon sysfs /devices/platform/14870000.dsim/backlight/panel u:object_r:sysfs_graphics:s0
|
||||
genfscon sysfs /devices/platform/14a50000.abox/service u:object_r:sysfs_abox_writable:s0
|
||||
genfscon sysfs /devices/platform/14860000.decon_f u:object_r:sysfs_decon:s0
|
||||
|
|
@ -33,6 +61,11 @@ genfscon sysfs /devices/platform/14400000.fimc_is_sensor/video4linux
|
|||
genfscon sysfs /devices/platform/14440000.fimc_is/video4linux u:object_r:sysfs_v4l_fimc:s0
|
||||
genfscon sysfs /devices/platform/12c30000.mfc0/video4linux u:object_r:sysfs_v4l_mfc:s0
|
||||
genfscon sysfs /devices/platform/12c00000.smfc/video4linux u:object_r:sysfs_v4l_smfc:s0
|
||||
genfscon sysfs /devices/soc0/soc_id u:object_r:sysfs_socinfo:s0
|
||||
genfscon sysfs /devices/soc0/machine u:object_r:sysfs_sec_gps:s0
|
||||
genfscon sysfs /devices/soc0/revision u:object_r:sysfs_sec_gps:s0
|
||||
genfscon sysfs /devices/virtual/block/zram0/mm_stat u:object_r:sysfs_zram:s0
|
||||
genfscon sysfs /devices/system/chip-id/revision u:object_r:sysfs_ss_writable:s0
|
||||
genfscon sysfs /devices/platform/battery/power_supply/battery u:object_r:sysfs_battery_writable:s0
|
||||
genfscon sysfs /devices/platform/battery/power_supply/battery/batt_capacity_max u:object_r:sysfs_battery_writable:s0
|
||||
genfscon sysfs /devices/platform/battery/power_supply/battery/status u:object_r:sysfs_battery_writable:s0
|
||||
|
|
@ -42,17 +75,29 @@ genfscon sysfs /devices/platform/battery/power_supply/wireless/type
|
|||
genfscon sysfs /devices/platform/battery/power_supply/ps/type u:object_r:sysfs_battery_writable:s0
|
||||
genfscon sysfs /devices/platform/battery/power_supply/ps/status u:object_r:sysfs_battery_writable:s0
|
||||
|
||||
genfscon sysfs /devices/soc0/soc_id u:object_r:sysfs_socinfo:s0
|
||||
genfscon sysfs /devices/system/chip-id/revision u:object_r:sysfs_ss_writable:s0
|
||||
# S2MU005 CHARGER (A10)
|
||||
genfscon sysfs /devices/platform/13840000.i2c/i2c-9/9-003d/s2mu004-charger/power_supply/s2mu004-charger u:object_r:sysfs_charger:s0
|
||||
genfscon sysfs /devices/platform/13840000.i2c/i2c-9/9-003d/s2mu004-muic/power_supply/muic-manager u:object_r:sysfs_charger:s0
|
||||
|
||||
genfscon sysfs /devices/virtual/android_usb/android0 u:object_r:sysfs_android_usb:s0
|
||||
genfscon sysfs /devices/virtual/camera u:object_r:sysfs_camera:s0
|
||||
genfscon sysfs /devices/virtual/camera/rear/fw_update u:object_r:sysfs_camera_writable:s0
|
||||
genfscon sysfs /devices/virtual/camera/rear/ssrm_camera_info u:object_r:sysfs_camera_writable:s0
|
||||
genfscon sysfs /devices/virtual/camera/flash/rear_flash u:object_r:sysfs_camera_writable:s0
|
||||
# S2MU106 CHARGER (A20e)
|
||||
genfscon sysfs /devices/platform/13840000.i2c/i2c-8/8-003d/s2mu106-powermeter/power_supply/s2mu106_pmeter u:object_r:sysfs_charger:s0
|
||||
genfscon sysfs /devices/platform/13840000.i2c/i2c-8/8-003d/s2mu106-muic/power_supply/muic-manager u:object_r:sysfs_charger:s0
|
||||
genfscon sysfs /devices/platform/13840000.i2c/i2c-8/8-003d/s2mu106-charger/power_supply/otg u:object_r:sysfs_charger:s0
|
||||
genfscon sysfs /devices/platform/13840000.i2c/i2c-8/8-003d/s2mu106-charger/power_supply/s2mu106-charger u:object_r:sysfs_charger:s0
|
||||
genfscon sysfs /devices/platform/13830000.i2c/i2c-7/7-003c/power_supply/s2mu106-usbpd/type u:object_r:sysfs_charger:s0
|
||||
genfscon sysfs /devices/platform/13830000.i2c/i2c-7/7-003b/power_supply/s2mu106-fuelgauge/type u:object_r:sysfs_fuelgauge:s0
|
||||
|
||||
genfscon sysfs /firmware/devicetree/base/model_info-system_rev u:object_r:sysfs_info:s0
|
||||
# S2MU106 CHARGER (A20)
|
||||
genfscon sysfs /devices/platform/13840000.i2c/i2c-9/9-003d/s2mu106-powermeter/power_supply/s2mu106_pmeter u:object_r:sysfs_charger:s0
|
||||
genfscon sysfs /devices/platform/13840000.i2c/i2c-9/9-003d/s2mu106-muic/power_supply/muic-manager u:object_r:sysfs_charger:s0
|
||||
genfscon sysfs /devices/platform/13840000.i2c/i2c-9/9-003d/s2mu106-charger/power_supply/otg u:object_r:sysfs_charger:s0
|
||||
genfscon sysfs /devices/platform/13840000.i2c/i2c-9/9-003d/s2mu106-charger/power_supply/s2mu106-charger u:object_r:sysfs_charger:s0
|
||||
genfscon sysfs /devices/platform/13830000.i2c/i2c-8/8-003b/power_supply/s2mu106-fuelgauge/ u:object_r:sysfs_fuelgauge:s0
|
||||
|
||||
genfscon sysfs /kernel/gpu/ u:object_r:sysfs_gpu:s0
|
||||
genfscon sysfs /kernel/gpu/gpu_max_clock u:object_r:sysfs_gpu_writable:s0
|
||||
genfscon sysfs /kernel/gpu/gpu_min_clock u:object_r:sysfs_gpu_writable:s0
|
||||
genfscon sysfs /class/input/input1/enabled u:object_r:sysfs_sec_touchscreen:s0
|
||||
genfscon sysfs /module/modem_ctrl_ss310ap/parameters/ds_detect u:object_r:sysfs_modem:s0
|
||||
genfscon sysfs /module/scsc_bt/parameters/bluetooth_address u:object_r:sysfs_bt_writable:s0
|
||||
genfscon sysfs /firmware/devicetree/base/model_info-system_rev u:object_r:sysfs_info:s0
|
||||
genfscon sysfs /kernel/gpu/ u:object_r:sysfs_gpu:s0
|
||||
genfscon sysfs /kernel/gpu/gpu_max_clock u:object_r:sysfs_gpu_writable:s0
|
||||
genfscon sysfs /kernel/gpu/gpu_min_clock u:object_r:sysfs_gpu_writable:s0
|
||||
|
|
|
|||
4
universal7885-common/sepolicy/vendor/gpsd.te
vendored
4
universal7885-common/sepolicy/vendor/gpsd.te
vendored
|
|
@ -1,4 +1,4 @@
|
|||
r_dir_file(gpsd, sysfs_sec_gps);
|
||||
r_dir_file(gpsd, sysfs_sec_gps)
|
||||
|
||||
allow gpsd sysfs_gps_writable:file rw_file_perms;
|
||||
allow gpsd sysfs_wake_lock:file rw_file_perms;
|
||||
|
|
@ -10,3 +10,5 @@ allow gpsd bt_device:chr_file rw_file_perms;
|
|||
allow gpsd gps_device:chr_file rw_file_perms;
|
||||
|
||||
allow gpsd gpsd_exec:file execute_no_trans;
|
||||
|
||||
allow gpsd bootanim_system_prop:file { read open getattr };
|
||||
|
|
|
|||
|
|
@ -7,8 +7,14 @@ allow hal_camera_default sysfs_virtual:dir search;
|
|||
allow hal_camera_default sysfs_virtual:file rw_file_perms;
|
||||
allow hal_camera_default sysfs_camera:dir search;
|
||||
allow hal_camera_default sysfs_camera:file rw_file_perms;
|
||||
allow hal_camera_default sysfs_battery:dir search;
|
||||
allow hal_camera_default sysfs_battery_writable:dir search;
|
||||
allow hal_camera_default sysfs_battery_writable:file r_file_perms;
|
||||
|
||||
get_prop(hal_camera_default, exported_camera_prop)
|
||||
|
||||
binder_call(hal_camera_default, system_server)
|
||||
binder_call(system_server, hal_camera_default)
|
||||
|
||||
r_dir_file(hal_camera_default, sysfs_decon)
|
||||
set_prop(hal_camera_default, camera_prop)
|
||||
|
|
|
|||
|
|
@ -1,11 +1,9 @@
|
|||
hal_client_domain(hal_graphics_composer_default, hal_graphics_allocator);
|
||||
hal_client_domain(hal_graphics_composer_default, hal_graphics_allocator)
|
||||
|
||||
vndbinder_use(hal_graphics_composer_default)
|
||||
|
||||
allow hal_graphics_composer_default self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;
|
||||
|
||||
allow hal_graphics_composer_default vendor_surfaceflinger_vndservice:service_manager { add find };
|
||||
|
||||
# cgroup tasks
|
||||
allow hal_graphics_composer_default cgroup:file getattr;
|
||||
|
||||
|
|
|
|||
|
|
@ -5,3 +5,4 @@ allow hal_health_default sysfs_battery:dir r_dir_perms;
|
|||
allow hal_health_default sysfs_battery:file r_file_perms;
|
||||
allow hal_health_default sysfs_battery_writable:dir search;
|
||||
allow hal_health_default sysfs_battery_writable:file r_file_perms;
|
||||
allow hal_health_default sysfs_fuelgauge:file r_file_perms;
|
||||
|
|
|
|||
1
universal7885-common/sepolicy/vendor/hal_keymaster_default.te
vendored
Normal file
1
universal7885-common/sepolicy/vendor/hal_keymaster_default.te
vendored
Normal file
|
|
@ -0,0 +1 @@
|
|||
allow hal_keymaster_default prov_efs_file r_file_perms;
|
||||
|
|
@ -1,2 +0,0 @@
|
|||
allow hal_lineage_fastcharge_default sysfs_virtual:dir search;
|
||||
allow hal_lineage_fastcharge_default sysfs_virtual:file rw_file_perms;
|
||||
|
|
@ -1,2 +0,0 @@
|
|||
allow hal_lineage_touch_default sysfs_virtual:dir search;
|
||||
allow hal_lineage_touch_default sysfs_virtual:file rw_file_perms;
|
||||
|
|
@ -1,4 +1,3 @@
|
|||
allow hal_nfc_default nfc_vendor_data_file:dir w_dir_perms;
|
||||
allow hal_nfc_default nfc_vendor_data_file:file create_file_perms;
|
||||
|
||||
set_prop(hal_nfc_default, vendor_nfc_prop)
|
||||
|
|
|
|||
|
|
@ -4,3 +4,6 @@ allow hal_power_default sysfs_input:file r_file_perms;
|
|||
allow hal_power_default sysfs_virtual:dir r_dir_perms;
|
||||
allow hal_power_default sysfs_virtual:file r_file_perms;
|
||||
allow hal_power_default sysfs_touchscreen_writable:dir r_dir_perms;
|
||||
allow hal_power_default sysfs_sec_touchscreen:dir read;
|
||||
type hal_lineage_power_hwservice, hwservice_manager_type;
|
||||
add_hwservice(hal_power_default, hal_power_hwservice)
|
||||
|
|
|
|||
2
universal7885-common/sepolicy/vendor/hal_power_stats_default.te
vendored
Normal file
2
universal7885-common/sepolicy/vendor/hal_power_stats_default.te
vendored
Normal file
|
|
@ -0,0 +1,2 @@
|
|||
allow hal_power_stats_default sysfs_iio:dir r_dir_perms;
|
||||
allow hal_power_stats_default sysfs_iio:file r_file_perms;
|
||||
|
|
@ -4,7 +4,10 @@ allow hal_sensors_default sysfs_virtual:dir r_dir_perms;
|
|||
allow hal_sensors_default sysfs_virtual:file rw_file_perms;
|
||||
allow hal_sensors_default sysfs_virtual:lnk_file read;
|
||||
allow hal_sensors_default baro_delta_factoryapp_efs_file:file r_file_perms;
|
||||
allow hal_sensors_default sysfs_input:file read;
|
||||
allow hal_sensors_default sysfs_input:file r_file_perms;
|
||||
allow hal_sensors_default sysfs_input_writable:file rw_file_perms;
|
||||
allow hal_sensors_default sysfs_input:dir r_dir_perms;
|
||||
allow hal_sensors_default sysfs_sensor_writable:file rw_file_perms;
|
||||
allow hal_sensors_default sysfs_spi_writeable:file rw_file_perms;
|
||||
|
||||
# yas_lib
|
||||
|
|
|
|||
|
|
@ -1,4 +1,4 @@
|
|||
set_prop(hal_wifi_default, vendor_wlan_prop);
|
||||
set_prop(hal_wifi_default, vendor_wlan_prop)
|
||||
get_prop(hal_wifi_default, vendor_wifi_prop)
|
||||
|
||||
allow hal_wifi_default conn_vendor_data_file:dir search;
|
||||
|
|
|
|||
|
|
@ -1,3 +1 @@
|
|||
type hal_sec_radio_hwservice, hwservice_manager_type;
|
||||
type hal_sec_radio_bridge_hwservice, hwservice_manager_type;
|
||||
type hal_sec_radio_channel_hwservice, hwservice_manager_type;
|
||||
type rild_hwservice, hwservice_manager_type;
|
||||
|
|
|
|||
|
|
@ -1,4 +1,6 @@
|
|||
vendor.samsung.hardware.gnss::ISehGnss u:object_r:hal_gnss_hwservice:s0
|
||||
vendor.samsung.hardware.radio::ISehRadio u:object_r:hal_sec_radio_hwservice:s0
|
||||
vendor.samsung.hardware.radio.bridge::ISehBridge u:object_r:hal_sec_radio_bridge_hwservice:s0
|
||||
vendor.samsung.hardware.radio.channel::ISehChannel u:object_r:hal_sec_radio_channel_hwservice:s0
|
||||
vendor.samsung.hardware.radio::ISehRadio u:object_r:rild_hwservice:s0
|
||||
vendor.samsung.hardware.radio.bridge::ISehBridge u:object_r:rild_hwservice:s0
|
||||
vendor.samsung.hardware.radio.channel::ISehChannel u:object_r:rild_hwservice:s0
|
||||
vendor.lineage.power::ILineagePower u:object_r:hal_power_hwservice:s0
|
||||
|
||||
|
|
|
|||
6
universal7885-common/sepolicy/vendor/init.te
vendored
6
universal7885-common/sepolicy/vendor/init.te
vendored
|
|
@ -37,6 +37,12 @@ allow init gps_vendor_data_file:file lock;
|
|||
allow init socket_device:sock_file create_file_perms;
|
||||
allow init kernel:system module_request;
|
||||
|
||||
allow init logd:unix_stream_socket connectto;
|
||||
allow init logdr_socket:sock_file write;
|
||||
allow init self:capability sys_nice;
|
||||
allow init boot_logcat_file:file rw_file_perms;
|
||||
allow init logcat_exec:file { execute getattr open read };
|
||||
|
||||
allow init proc:file setattr;
|
||||
allow init proc_swapiness:file write;
|
||||
allow init proc_extra:file setattr;
|
||||
|
|
|
|||
|
|
@ -9,4 +9,5 @@ allow kernel self:capability { sys_rawio mknod };
|
|||
|
||||
allow kernel block_device:dir search;
|
||||
|
||||
allow kernel sysfs_sec_key:dir search;
|
||||
r_dir_file(kernel, sysfs_virtual)
|
||||
|
|
|
|||
|
|
@ -3,4 +3,4 @@ allow mediacodec sysfs_v4l:dir r_dir_perms;
|
|||
allow mediacodec sysfs_v4l_mfc:dir search;
|
||||
allow mediacodec sysfs_v4l_mfc:file r_file_perms;
|
||||
|
||||
hal_client_domain(mediacodec, hal_power);
|
||||
hal_client_domain(mediacodec, hal_power)
|
||||
|
|
|
|||
1
universal7885-common/sepolicy/vendor/mediaserver.te
vendored
Normal file
1
universal7885-common/sepolicy/vendor/mediaserver.te
vendored
Normal file
|
|
@ -0,0 +1 @@
|
|||
get_prop(mediaserver, exported_camera_prop)
|
||||
|
|
@ -6,3 +6,5 @@ allow priv_app debugfs_mali:dir search;
|
|||
allow priv_app debugfs_mali_mem:dir search;
|
||||
|
||||
allow priv_app sysfs_zram:file r_file_perms;
|
||||
|
||||
#get_prop(priv_app, vendor_default_prop)
|
||||
|
|
|
|||
|
|
@ -1,5 +1,6 @@
|
|||
# modemloader
|
||||
type modemloader_prop, property_type;
|
||||
type camera_prop, property_type;
|
||||
|
||||
type persist_rmnet_prop, property_type;
|
||||
type persist_data_df_prop, property_type;
|
||||
|
|
|
|||
|
|
@ -14,6 +14,7 @@ persist.data.df. u:object_r:persist_data_df_prop:s0
|
|||
persist.data.wda. u:object_r:persist_data_wda_prop:s0
|
||||
|
||||
# CAMERA
|
||||
persist.sys.camera. u:object_r:camera_prop:s0
|
||||
persist.vendor.sys.camera. u:object_r:vendor_camera_prop:s0
|
||||
|
||||
# GPS
|
||||
|
|
|
|||
7
universal7885-common/sepolicy/vendor/rild.te
vendored
7
universal7885-common/sepolicy/vendor/rild.te
vendored
|
|
@ -5,6 +5,7 @@ allow rild vendor_data_file:file create_file_perms;
|
|||
allow rild radio_device:chr_file ioctl;
|
||||
|
||||
allow rild bin_nv_data_efs_file:file create_file_perms;
|
||||
dontaudit rild bin_nv_data_efs_file:file ioctl;
|
||||
|
||||
allow rild radio_vendor_data_file:file create_file_perms;
|
||||
allow rild radio_vendor_data_file:dir rw_dir_perms;
|
||||
|
|
@ -23,6 +24,6 @@ allow rild hal_audio_default:dir search;
|
|||
allow rild hal_audio_default:file r_file_perms;
|
||||
|
||||
# hwservice
|
||||
add_hwservice(rild, hal_sec_radio_hwservice)
|
||||
add_hwservice(rild, hal_sec_radio_bridge_hwservice)
|
||||
add_hwservice(rild, hal_sec_radio_channel_hwservice)
|
||||
add_hwservice(rild, rild_hwservice)
|
||||
|
||||
|
||||
|
|
|
|||
|
|
@ -1 +1 @@
|
|||
dontaudit secril_config_svc exported3_radio_prop:property_service set;
|
||||
dontaudit secril_config_svc radio_control_prop:property_service set;
|
||||
|
|
|
|||
|
|
@ -3,3 +3,10 @@ allow system_app gpu_device:chr_file rw_file_perms;
|
|||
|
||||
allow system_app proc_pagetypeinfo:file r_file_perms;
|
||||
allow system_app sysfs_virtual:dir search;
|
||||
|
||||
# battery sysfs
|
||||
|
||||
allow system_app sysfs_battery_info:dir { search };
|
||||
allow system_app sysfs_battery_info:file { read open getattr };
|
||||
|
||||
r_dir_file(system_app, sysfs_battery_info)
|
||||
|
|
|
|||
|
|
@ -11,11 +11,14 @@ allow system_server frp_block_device:blk_file rw_file_perms;
|
|||
|
||||
allow system_server sysfs_rtc:file r_file_perms;
|
||||
|
||||
allow system_server sysfs_battery_writable:dir r_dir_perms;
|
||||
allow system_server sysfs_battery_writable:file rw_file_perms;
|
||||
|
||||
get_prop(system_server, vendor_radio_prop)
|
||||
|
||||
r_dir_file(system_server, sysfs_virtual)
|
||||
|
||||
get_prop(system_server, exported_camera_prop);
|
||||
get_prop(system_server, exported_camera_prop)
|
||||
get_prop(system_server, userspace_reboot_config_prop)
|
||||
get_prop(system_server, userspace_reboot_exported_prop)
|
||||
|
||||
|
|
|
|||
4
universal7885-common/sepolicy/vendor/tzdaemon.te
vendored
Normal file
4
universal7885-common/sepolicy/vendor/tzdaemon.te
vendored
Normal file
|
|
@ -0,0 +1,4 @@
|
|||
allow tzdaemon mnt_vendor_file:dir rw_dir_perms;
|
||||
allow tzdaemon efs_file:dir search;
|
||||
allow tzdaemon tee_efs_file:dir { add_name remove_name open create read search write };
|
||||
allow tzdaemon tee_efs_file:file { getattr open create read rename unlink write };
|
||||
|
|
@ -10,3 +10,10 @@ allow vendor_init wifi_data_file:dir search;
|
|||
allow vendor_init system_data_file:dir create_dir_perms;
|
||||
# mkdir /data/camera/*
|
||||
allow vendor_init camera_data_file:dir create_dir_perms;
|
||||
allow vendor_init cache_file:dir { remove_name write };
|
||||
allow vendor_init boot_logcat_file:file unlink;
|
||||
set_prop(vendor_init, persist_data_df_prop)
|
||||
set_prop(vendor_init, persist_data_wda_prop)
|
||||
set_prop(vendor_init, persist_rmnet_prop)
|
||||
get_prop(vendor_init, system_prop)
|
||||
|
||||
|
|
|
|||
|
|
@ -1,7 +1,7 @@
|
|||
type wlbtd, domain;
|
||||
|
||||
type wlbtd_exec, exec_type, vendor_file_type, file_type;
|
||||
init_daemon_domain(wlbtd);
|
||||
init_daemon_domain(wlbtd)
|
||||
|
||||
allow wlbtd conn_vendor_data_file:dir search;
|
||||
allow wlbtd conn_vendor_data_file:file rw_file_perms;
|
||||
|
|
@ -9,7 +9,7 @@ allow wlbtd self:netlink_generic_socket { create setopt bind getattr read write
|
|||
|
||||
allow wlbtd init:unix_stream_socket connectto;
|
||||
|
||||
r_dir_file(wlbtd, sysfs_wifi);
|
||||
r_dir_file(wlbtd, sysfs_wifi)
|
||||
allow wlbtd sysfs_wifi_writable:file rw_file_perms;
|
||||
|
||||
set_prop(wlbtd, vendor_wlbtd_prop);
|
||||
set_prop(wlbtd, vendor_wlbtd_prop)
|
||||
|
|
|
|||
|
|
@ -1,3 +1,3 @@
|
|||
get_prop(zygote, exported_camera_prop);
|
||||
get_prop(zygote, exported_camera_prop)
|
||||
|
||||
allow zygote proc_cmdline:file r_file_perms;
|
||||
|
|
|
|||
Loading…
Reference in a new issue