universal7885: sepolicy: Write rules for power stats HAL

* Also address other denials happening on permissive mode
This commit is contained in:
roynatech2544 2022-08-27 06:55:05 +00:00
commit facb92a88a
5 changed files with 12 additions and 4 deletions

View file

@ -54,6 +54,7 @@ type sysfs_sim_writable, sysfs_type, rw_fs_type, fs_type;
type sysfs_spi_writeable, sysfs_type, rw_fs_type, fs_type; type sysfs_spi_writeable, sysfs_type, rw_fs_type, fs_type;
type sysfs_wifi_writable, sysfs_type, rw_fs_type, fs_type; type sysfs_wifi_writable, sysfs_type, rw_fs_type, fs_type;
type sysfs_printk, sysfs_type, rw_fs_type, fs_type; type sysfs_printk, sysfs_type, rw_fs_type, fs_type;
type sysfs_devfreq, sysfs_type, r_fs_type, fs_type;
### VENDOR ### VENDOR
type vendor_firmware_file, file_type, vendor_file_type; type vendor_firmware_file, file_type, vendor_file_type;

View file

@ -122,7 +122,6 @@ genfscon sysfs /devices/platform/11ce0000.speedy/i2c-5/5-0000/s2mpu08-rtc/rtc
genfscon sysfs /devices/platform/11ce0000.speedy/i2c-6/6-0000/s2mpu08-rtc/rtc u:object_r:sysfs_rtc:s0 genfscon sysfs /devices/platform/11ce0000.speedy/i2c-6/6-0000/s2mpu08-rtc/rtc u:object_r:sysfs_rtc:s0
# A40 RTC # A40 RTC
genfscon sysfs /devices/platform/11ce0000.speedy/i2c-7/7-0000/s2mpu08-rtc/rtc u:object_r:sysfs_rtc:s0 genfscon sysfs /devices/platform/11ce0000.speedy/i2c-7/7-0000/s2mpu08-rtc/rtc u:object_r:sysfs_rtc:s0
#genfscon sysfs /devices/platform/11ce0000.speedy/i2c-6/6-0000/s2mpu08-rtc/rtc u:object_r:sysfs_rtc:s0
# A20e Display # A20e Display
genfscon sysfs /devices/platform/13870000.i2c/i2c-11/11-0048/input/ u:object_r:sysfs_touchscreen_writable:s0 genfscon sysfs /devices/platform/13870000.i2c/i2c-11/11-0048/input/ u:object_r:sysfs_touchscreen_writable:s0
@ -149,6 +148,14 @@ genfscon sysfs /devices/soc0/revision
genfscon sysfs /devices/virtual/block/zram0/mm_stat u:object_r:sysfs_zram:s0 genfscon sysfs /devices/virtual/block/zram0/mm_stat u:object_r:sysfs_zram:s0
genfscon sysfs /devices/system/chip-id/revision u:object_r:sysfs_ss_writable:s0 genfscon sysfs /devices/system/chip-id/revision u:object_r:sysfs_ss_writable:s0
# Devfreq
genfscon sysfs /devices/platform/17000010.devfreq_mif/devfreq/17000010.devfreq_mif u:object_r:sysfs_devfreq:s0
genfscon sysfs /devices/platform/17000020.devfreq_int/devfreq/17000020.devfreq_int u:object_r:sysfs_devfreq:s0
genfscon sysfs /devices/platform/17000040.devfreq_disp/devfreq/17000040.devfreq_disp u:object_r:sysfs_devfreq:s0
genfscon sysfs /devices/platform/17000050.devfreq_cam/devfreq/17000050.devfreq_cam u:object_r:sysfs_devfreq:s0
genfscon sysfs /devices/platform/17000060.devfreq_aud/devfreq/17000060.devfreq_aud u:object_r:sysfs_devfreq:s0
genfscon sysfs /devices/platform/17000070.devfreq_fsys/devfreq/17000070.devfreq_fsys u:object_r:sysfs_devfreq:s0
# S2MU005 CHARGER (A10) # S2MU005 CHARGER (A10)
genfscon sysfs /devices/platform/13840000.i2c/i2c-9/9-003d/s2mu004-charger/power_supply/s2mu004-charger u:object_r:sysfs_charger:s0 genfscon sysfs /devices/platform/13840000.i2c/i2c-9/9-003d/s2mu004-charger/power_supply/s2mu004-charger u:object_r:sysfs_charger:s0
genfscon sysfs /devices/platform/13840000.i2c/i2c-9/9-003d/s2mu004-muic/power_supply/muic-manager u:object_r:sysfs_charger:s0 genfscon sysfs /devices/platform/13840000.i2c/i2c-9/9-003d/s2mu004-muic/power_supply/muic-manager u:object_r:sysfs_charger:s0

View file

@ -53,3 +53,4 @@ allow gpsd gpsd_exec:file execute_no_trans;
get_prop(gpsd, exported_config_prop) get_prop(gpsd, exported_config_prop)
get_prop(gpsd, bootanim_system_prop) get_prop(gpsd, bootanim_system_prop)
allow gpsd servicemanager:binder call; allow gpsd servicemanager:binder call;
allow gpsd hal_system_suspend_service:service_manager find;

View file

@ -1,2 +1 @@
allow hal_power_stats_default sysfs_iio:dir r_dir_perms; allow hal_power_stats_default sysfs_devfreq:file r_file_perms;
allow hal_power_stats_default sysfs_iio:file r_file_perms;

View file

@ -24,5 +24,5 @@ r_dir_file(system_server, sysfs_virtual)
get_prop(system_server, exported_camera_prop) get_prop(system_server, exported_camera_prop)
get_prop(system_server, userspace_reboot_config_prop) get_prop(system_server, userspace_reboot_config_prop)
get_prop(system_server, userspace_reboot_exported_prop) get_prop(system_server, userspace_reboot_exported_prop)
allow system_server self:capability sys_module;
# allow system_server unlabeled:file { write setattr }; # allow system_server unlabeled:file { write setattr };