bunnypad/android_device_samsung_a20
Watch
1
0
Fork
You've already forked android_device_samsung_a20
 0
mirror of https://github.com/chararomandroid/android_device_samsung_a20 synced 2026-08-23 04:25:33 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

universal7885: Go back track slsi sepolicy

Browse source 
- Also cleanup rebundant rules, duplicate rules
This commit is contained in:
roynatech2544 2023-11-26 16:21:24 +09:00
commit e732699c27
No known key found for this signature in database
GPG key ID: 389DAC92CAECBBCC
77 changed files with 131 additions and 1402 deletions
Download patch file Download diff file Expand all files Collapse all files

49
universal7885-common/sepolicy/vendor/gpsd.te vendored
View file

@ -1,47 +1,5 @@
type gpsd, domain, netdomain;
type gpsd_exec, exec_type, vendor_file_type, file_type;
# gpsd is started by init, type transit from init domain to gpsd domain
init_daemon_domain(gpsd)
allow gpsd rild:unix_stream_socket connectto;
get_prop(gpsd, vendor_radio_prop)
allow gpsd system_data_file:dir search;
get_prop(gpsd, telephony_config_prop)
get_prop(gpsd, exported_config_prop)
get_prop(gpsd, hwservicemanager_prop)
hwbinder_use(gpsd)
allow gpsd system_suspend_hwservice:hwservice_manager { find };
allow gpsd fwk_sensor_hwservice:hwservice_manager { find };
binder_call(gpsd, system_suspend_server)
binder_call(gpsd, system_server)
binder_call(system_server, gpsd)
allow gpsd self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;
allow gpsd self:{ tcp_socket udp_socket } create_stream_socket_perms;
allow gpsd port:tcp_socket { name_bind name_connect };
allow gpsd port:udp_socket name_bind;
allow gpsd node:{ tcp_socket udp_socket } node_bind;
# /acct/tasks
allow gpsd cgroup:file getattr;
# /dev/socket/fwmarkd
allow gpsd fwmarkd_socket:sock_file write;
# /data/vendor/gps
allow gpsd gps_vendor_data_file:dir rw_dir_perms;
allow gpsd gps_vendor_data_file:file create_file_perms;
allow gpsd gps_vendor_data_file:fifo_file create_file_perms;
r_dir_file(gpsd, sysfs_sec_gps)
allow gpsd sysfs_gps_writable:file rw_file_perms;
allow gpsd sysfs_wake_lock:file rw_file_perms;
allow gpsd sysfs_socinfo:file r_file_perms;
allow gpsd self:capability net_raw;
allow gpsd self:capability2 block_suspend;
@ -50,7 +8,8 @@ allow gpsd bt_device:chr_file rw_file_perms;
allow gpsd gps_device:chr_file rw_file_perms;
allow gpsd gpsd_exec:file execute_no_trans;
get_prop(gpsd, exported_config_prop)
get_prop(gpsd, bootanim_system_prop)
allow gpsd servicemanager:binder call;
allow gpsd hal_system_suspend_service:service_manager find;
get_prop(gpsd, exported_config_prop)
get_prop(gpsd, bootanim_system_prop)