universal7885: Go back track slsi sepolicy

- Also cleanup rebundant rules, duplicate rules
This commit is contained in:
roynatech2544 2023-11-26 16:21:24 +09:00
commit e732699c27
No known key found for this signature in database
GPG key ID: 389DAC92CAECBBCC
77 changed files with 131 additions and 1402 deletions

View file

@ -1,8 +0,0 @@
# Tag for read only filesystem type
attribute r_fs_type;
# Tag for read/write filesystem type
attribute rw_fs_type;
# Tag for read/execute filesystem type
attribute rx_fs_type;

View file

@ -1,4 +0,0 @@
# domain.te
# Make sure that labels are used correctly
neverallow { domain -vendor_init -ueventd } r_fs_type:file write;

View file

@ -1,14 +1 @@
# file.te
### DATA
type zram_data_file, file_type, data_file_type, core_data_file_type;
## SYSFS
type sysfs_virtual, fs_type, sysfs_type, mlstrustedobject;
type sysfs_sec_switch, sysfs_type, r_fs_type, fs_type;
type sysfs_battery, sysfs_type, r_fs_type, fs_type;
type sysfs_sec_touchscreen, sysfs_type, r_fs_type, fs_type;
type sysfs_sec_switch_writable, sysfs_type, rw_fs_type, fs_type;
type sysfs_touchscreen_writable, sysfs_type, rw_fs_type, fs_type;
type sysfs_battery_writable, sysfs_type, rw_fs_type, fs_type;
type sysfs_flashlight, sysfs_type, rw_fs_type, fs_type;
type sysfs_camera, fs_type, sysfs_type, mlstrustedobject;

View file

@ -1,19 +0,0 @@
genfscon sysfs /devices/virtual u:object_r:sysfs_virtual:s0
genfscon sysfs /devices/virtual/camera/flash/torch_brightness_lvl u:object_r:sysfs_flashlight:s0
genfscon sysfs /devices/virtual/camera/flash/torch_brightness_lvl_enable u:object_r:sysfs_flashlight:s0
genfscon sysfs /class/sec/tsp u:object_r:sysfs_sec_touchscreen:s0
genfscon sysfs /devices/virtual/sec/tsp u:object_r:sysfs_sec_touchscreen:s0
genfscon sysfs /devices/virtual/sec/tsp/cmd u:object_r:sysfs_touchscreen_writable:s0
genfscon sysfs /devices/virtual/sec/tsp/cmd_result u:object_r:sysfs_touchscreen_writable:s0
genfscon sysfs /devices/virtual/sec/tsp/ear_detect_enable u:object_r:sysfs_touchscreen_writable:s0
genfscon sysfs /devices/virtual/sec/tsp/prox_power_off u:object_r:sysfs_touchscreen_writable:s0
genfscon sysfs /devices/virtual/sec/tsp/input/enabled u:object_r:sysfs_touchscreen_writable:s0
genfscon sysfs /devices/virtual/sec/switch u:object_r:sysfs_sec_switch:s0
genfscon sysfs /devices/virtual/sec/switch/afc_disable u:object_r:sysfs_sec_switch_writable:s0
genfscon sysfs /devices/platform/battery/power_supply/battery u:object_r:sysfs_battery_writable:s0
genfscon sysfs /devices/platform/battery/power_supply/ac/type u:object_r:sysfs_battery_writable:s0
genfscon sysfs /devices/platform/battery/power_supply/wireless/type u:object_r:sysfs_battery_writable:s0
genfscon sysfs /devices/platform/battery/power_supply/ps/type u:object_r:sysfs_battery_writable:s0
genfscon sysfs /devices/platform/battery/power_supply/ps/status u:object_r:sysfs_battery_writable:s0
genfscon sysfs /devices/platform/battery/power_supply u:object_r:sysfs_battery:s0

View file

@ -1,2 +0,0 @@
### RFKILL
type rfkilldisabled_prop, property_type;

View file

@ -1,8 +0,0 @@
# teegris_use(domain)
#
# Allow domain to use teegris
define(`teegris_use', `
get_prop($1, vendor_tztsdaemon_prop)
# /dev/tzdev
allow $1 tz_user_device:chr_file rw_file_perms;
')