bunnypad/android_device_samsung_a20
Watch
1
0
Fork
You've already forked android_device_samsung_a20
 0
mirror of https://github.com/chararomandroid/android_device_samsung_a20 synced 2026-08-23 20:45:31 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

universal7885: sepolicy: Completely merge samsung_slsi repo

Browse source
This commit is contained in:
roynatech2544 2021-10-23 22:50:46 +09:00
commit f6da6e72c2
No known key found for this signature in database
GPG key ID: 9675C32163D88D30
82 changed files with 852 additions and 872 deletions
Download patch file Download diff file Expand all files Collapse all files

63
universal7885-common/sepolicy/vendor/cbd.te vendored
View file

@ -1,2 +1,65 @@
# cbd.te
type cbd, domain;
type cbd_exec, exec_type, vendor_file_type, file_type;
allow cbd self:capability setuid;
# cbd is started by init, type transit from init domain to cbd domain
init_daemon_domain(cbd)
# /dev/block/
allow cbd block_device:dir search;
# /data/vendor/log
allow cbd log_vendor_data_file:dir search;
# /data/vendor/log/cbd
allow cbd log_cbd_vendor_data_file:dir create_dir_perms;
allow cbd log_cbd_vendor_data_file:file create_file_perms;
# /dev/block/platform/.+/by-name/radio
allow cbd radio_block_device:blk_file r_file_perms;
# /dev/kmsg
allow cbd kmsg_device:chr_file rw_file_perms;
# /dev/umts_*
allow cbd vendor_radio_device:chr_file rw_file_perms;
# /mnt/vendor/
allow cbd mnt_vendor_file:dir search;
# /mnt/vendor/efs/
allow cbd efs_file:dir r_dir_perms;
# /mnt/vendor/efs/factory.prop
allow cbd efs_file:file r_file_perms;
# /mnt/vendor/efs/nv_data.bin
allow cbd bin_nv_data_efs_file:file r_file_perms;
# /proc/cmdline
allow cbd proc_cmdline:file r_file_perms;
# /sys/power/wake_unlock
allow cbd sysfs_wake_lock:file rw_file_perms;
# /sys/devices/platform/10000.mif_pdata/sim/
allow cbd sysfs_sim:dir r_dir_perms;
allow cbd sysfs_sim:file r_file_perms;
# /sys/devices/platform/10000.mif_pdata/sim/ds_detect
allow cbd sysfs_sim_writable:file rw_file_perms;
# kernel log
allow cbd kernel:system syslog_read;
# vendor.cbd.
set_prop(cbd, vendor_cbd_prop)
# FIXME: Can we be more specific?
allow cbd vendor_shell_exec:file execute_no_trans;
# FIXME END
allow cbd factoryprop_efs_file:file r_file_perms;
allow cbd sysfs_info:file r_file_perms;