bunnypad/android_device_samsung_a20
Watch
1
0
Fork
You've already forked android_device_samsung_a20
 0
mirror of https://github.com/chararomandroid/android_device_samsung_a20 synced 2026-08-23 12:35:33 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

universal7885: Go back track slsi sepolicy

Browse source 
- Also cleanup rebundant rules, duplicate rules
This commit is contained in:
roynatech2544 2023-11-26 16:21:24 +09:00
commit e732699c27
No known key found for this signature in database
GPG key ID: 389DAC92CAECBBCC
77 changed files with 131 additions and 1402 deletions
Download patch file Download diff file Expand all files Collapse all files

95
universal7885-common/sepolicy/vendor/rild.te vendored
View file

@ -1,102 +1,15 @@
# rild.te
get_prop(rild, vendor_radio_prop)
allow rild block_device:dir search;
allow rild mnt_vendor_file:dir { getattr search };
# audio hal
allow rild hal_audio_default:dir search;
allow rild hal_audio_default:file r_file_perms;
# gps
allow rild gpsd:dir search;
allow rild gpsd:file r_file_perms;
# /data
allow rild system_data_file:dir getattr;
# /data/vendor/log
allow rild log_vendor_data_file:dir rw_dir_perms;
allow rild log_vendor_data_file:file create_file_perms;
# /dev/block/platform/.+/by-name/radio
allow rild radio_block_device:blk_file r_file_perms;
# /dev/drb
allow rild drb_device:chr_file rw_file_perms;
# /dev/umts_*
# /dev/umts_ipc*
allow rild vendor_radio_device:chr_file rw_file_perms;
# /data/vendor/secradio
allow rild radio_vendor_data_file:dir rw_dir_perms;
allow rild radio_vendor_data_file:file create_file_perms;
# /efs/FactoryApp/
# /mnt/vendor/efs/root
allow rild app_efs_file:dir r_dir_perms;
allow rild app_efs_file:file { rw_file_perms setattr };
# /efs/imei
allow rild imei_efs_file:dir r_dir_perms;
allow rild imei_efs_file:file r_file_perms;
# /mnt/vendor/efs/
allow rild prov_efs_file:dir r_dir_perms;
allow rild prov_efs_file:file r_file_perms;
# /mnt/vendor/efs/nv_data.bin
allow rild bin_nv_data_efs_file:file { rw_file_perms setattr unlink };
# /proc/net/xt_qtaguid/iface_stat_fmt
allow rild proc_qtaguid_stat:file r_file_perms;
# /proc/sys/net/ipv6/conf/*/accept_ra_defrtr
allow rild proc_net:file rw_file_perms;
# mdc.
# persist.sys.omc_support
# ro.csc.
get_prop(rild, exported_config_prop);
# ro.boot.cpboot, ril.NwNmId[0-9]
get_prop(rild, telephony_config_prop)
get_prop(rild, vendor_radio_prop)
# vendor.cbd.
set_prop(rild, vendor_cbd_prop)
allow rild proc_net:file write;
allow rild proc_net:file w_file_perms;
allow rild vendor_data_file:file create_file_perms;
# /dev/umts_ipc0
allow rild radio_device:chr_file ioctl;
allow rild bin_nv_data_efs_file:file create_file_perms;
dontaudit rild bin_nv_data_efs_file:file ioctl;
allow rild imei_efs_file:file w_file_perms;
allow rild radio_vendor_data_file:file create_file_perms;
allow rild radio_vendor_data_file:dir rw_dir_perms;
allow rild proc_qtaguid_stat:file read;
allow rild factoryprop_efs_file:file rw_file_perms;
allow rild init:file getattr;
# binder
allow rild hal_radio_default:binder call;
# audio
allow rild hal_audio_default:dir search;
allow rild hal_audio_default:file r_file_perms;
allow rild efs_file:lnk_file read;
dontaudit rild bin_nv_data_efs_file:file ioctl;
# hwservice
add_hwservice(rild, rild_hwservice)
set_prop(rild, radio_prop)
binder_call(rild, multiclientd)
binder_call(multiclientd, rild)
allow rild imei_efs_file:file w_file_perms;
binder_call(rild, hal_radio_default)