psmattas/device_motorola_sanders
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

potter: update sepolicy

Browse Source
This commit is contained in:
Vachounet
2017-04-16 13:47:08 +02:00
parent 7c99cc1e11
commit 102ff37042
16 changed files with 149 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
sepolicy/akmd.te Normal file
View File

@@ -0,0 +1,3 @@
type akmd, domain, domain_deprecated;
type akmd_exec, exec_type, file_type;
init_daemon_domain(akmd)

9
sepolicy/device.te
View File

@@ -1 +1,10 @@
type adspd_device, dev_type;
type amps_raw_device, dev_type;
type compass_device, dev_type;
type haptics_device, dev_type;
type hob_device, dev_type;
type graphics_fb_device, dev_type;
type laser_device, dev_type;
type synaptics_rmi_device, dev_type;
type shwi_device, dev_type;
type isdbt_device, dev_type;

34
sepolicy/file.te
View File

@@ -1,6 +1,31 @@
# ADSP
type adspd_data_file, file_type, data_file_type;
# FSG
type fsg_file, fs_type, contextmount_type;
# Modem
type persist_modem_file, file_type, data_file_type;
type persist_omadm_file, file_type, data_file_type;
type sds_data_file, file_type, data_file_type;
type pds_public_file, file_type, data_file_type;
type persist_camera_file, file_type, data_file_type;
type persist_antcap_file, file_type, data_file_type;
type pds_telephony_file, file_type, data_file_type;
type pds_batt_file, file_type, data_file_type;
type pds_omadm_file, file_type, data_file_type;
type persist_audio_file, file_type, data_file_type;
type moodle_data_file, file_type, data_file_type;
type cutback_data_file, file_type, data_file_type;
type dbvc_data_file, file_type, data_file_type;
type akmd_data_file, file_type, data_file_type;
type wapi_supplicant_data_file, file_type, data_file_type;
# RIL
type netmgr_data_file, file_type, data_file_type;
@@ -10,3 +35,12 @@ type sysfs_homebutton, fs_type, sysfs_type;
type sysfs_mmi_fp, fs_type, sysfs_type;
type sysfs_mmi_laser, fs_type, sysfs_type;
type sysfs_mmi_touch, fs_type, sysfs_type;
type sysfs_capsense, fs_type, sysfs_type;
type sysfs_batt, fs_type, sysfs_type;
type sysfs_cnss, fs_type, sysfs_type;
type sysfs_fpc, fs_type, sysfs_type;
type sysfs_sensors, fs_type, sysfs_type;
type fpc_socket, file_type;

75
sepolicy/file_contexts
View File

@@ -1,5 +1,9 @@
# ADSP
/sys/kernel/aov(/.*)? u:object_r:sysfs_adsp:s0
/data/adspd(/.*)? u:object_r:adspd_data_file:s0
# AMPS
/dev/hidraw[0-9]* u:object_r:amps_raw_device:s0
# Binaries
/system/bin/adspd u:object_r:adspd_exec:s0
@@ -7,9 +11,10 @@
/system/bin/init\.mmi\.laser\.sh u:object_r:mmi_laser_exec:s0
/system/bin/init\.mmi\.touch\.sh u:object_r:mmi_touch_sh_exec:s0
/system/bin/motosh u:object_r:sensor_hub_exec:s0
/system/bin/akmd09912 u:object_r:akmd_exec:s0
# Camera
/sys/kernel/range/offset u:object_r:sysfs_mmi_laser:s0
/sys/kernel/range(/.*)? u:object_r:sysfs_mmi_laser:s0
# CMActions
/sys/homebutton/enable u:object_r:sysfs_homebutton:s0
@@ -17,11 +22,69 @@
# Fingerprint
/data/.fps(/.*)? u:object_r:fingerprintd_data_file:s0
/data/fpc u:object_r:fingerprintd_data_file:s0
/sys/devices/soc/7af8000\.spi/spi_master/spi8/spi8\.0(/.*)? u:object_r:sysfs_mmi_fp:s0
/data/fpc/socket u:object_r:fpc_socket:s0
/sys/devices/soc/7af8000.spi/spi_master/spi8/spi8.0(/.*)? u:object_r:sysfs_fpc:s0
# mmi_touch related /sys files
/sys/devices/soc/78b7000\.i2c/i2c-3/3-0020(/.*)? u:object_r:sysfs_mmi_touch:s0
# Modem
/persist/mdm(/.*)? u:object_r:persist_modem_file:s0
/persist/prop(/.*)? u:object_r:persist_omadm_file:s0
/persist/prov(/.*)? u:object_r:persist_drm_file:s0
/persist/omadm(/.*)? u:object_r:persist_omadm_file:s0
/persist/omadm_database(/.*)? u:object_r:persist_omadm_file:s0
/persist/omadm_cust_database(/.*)? u:object_r:persist_omadm_file:s0
/persist/public(/.*)? u:object_r:pds_public_file:s0
/persist/camera(/.*)? u:object_r:persist_camera_file:s0
/persist/captouch_(.*)? u:object_r:persist_antcap_file:s0
/persist/telephony(/.*)? u:object_r:pds_telephony_file:s0
/persist/public/telephony(/.*)? u:object_r:pds_telephony_file:s0
/persist/batt_health(/.*)? u:object_r:pds_batt_file:s0
/persist/public/omadm(/.*)? u:object_r:pds_omadm_file:s0
/persist/factory/audio(/.*)? u:object_r:persist_audio_file:s0
/data/wapi_certificate(/.*)? u:object_r:wapi_supplicant_data_file:s0
/data/misc/akmd(/.*)? u:object_r:akmd_data_file:s0
/data/local/dbvc(/.*)? u:object_r:dbvc_data_file:s0
/data/local/moodle(/.*)? u:object_r:moodle_data_file:s0
/data/misc/cutback(/.*)? u:object_r:cutback_data_file:s0
/data/misc/sds(/.*)? u:object_r:sds_data_file:s0
/sys/class/capsense(/.*)? u:object_r:sysfs_capsense:s0
/sys/module/qpnp_bms(/.*)? u:object_r:sysfs_batt:s0
/sys/module/cnss_pci(/.*)? u:object_r:sysfs_cnss:s0
/sys/devices/iio_sysfs_trigger(/.*)? u:object_r:sysfs_sensors:s0
/sys/devices/virtual/stm401/stm401_ms(/.*)? u:object_r:sysfs_sensors:s0
/sys/devices/virtual/stm401/stm401_as(/.*)? u:object_r:sysfs_sensors:s0
/sys/devices/platform/msm_ssbi.0/pm8921-core/pm8921-charger(/.*)? u:object_r:sysfs_batt:s0
/dev/rmi0 u:object_r:synaptics_rmi_device:s0
/dev/sec u:object_r:shwi_device:s0
/dev/kgsl u:object_r:gpu_device:s0
/dev/isdbt u:object_r:isdbt_device:s0
/dev/ttyHS3 u:object_r:adspd_device:s0
/dev/akm8963 u:object_r:compass_device:s0
/dev/drv2605 u:object_r:haptics_device:s0
/dev/akm09912 u:object_r:compass_device:s0
/dev/motcamera0 u:object_r:camera_device:s0
/dev/akm8963_dev u:object_r:compass_device:s0
/dev/stml0xx_akm u:object_r:compass_device:s0
/dev/akm09912_dev u:object_r:compass_device:s0
/dev/mot_hob_ram u:object_r:hob_device:s0
/dev/bcm2079x-i2c u:object_r:nfc_device:s0
/dev/fb_quickdraw u:object_r:graphics_fb_device:s0
# Partitions
/dev/block/bootdevice/by-name/cache u:object_r:cache_block_device:s0
/dev/block/bootdevice/by-name/frp u:object_r:frp_block_device:s0
@@ -37,3 +100,11 @@
/dev/motosh u:object_r:sensors_device:s0
/dev/motosh_as u:object_r:sensors_device:s0
/dev/motosh_ms u:object_r:sensors_device:s0
/dev/stm401.* u:object_r:sensors_device:s0
/dev/lis3dh u:object_r:sensors_device:s0
/dev/stml0xx u:object_r:sensors_device:s0
/dev/l3g4200d u:object_r:sensors_device:s0
/dev/stml0xx_ms u:object_r:sensors_device:s0
/dev/stml0xx_as u:object_r:sensors_device:s0
/data/misc/sensor(/.*)? u:object_r:sensors_data_file:s0

3
sepolicy/fingerprintd.te
View File

@@ -6,4 +6,7 @@ allow fingerprintd fingerprintd_data_file:sock_file { create unlink };
allow fingerprintd sysfs_mmi_fp:dir { open read search };
allow fingerprintd sysfs_mmi_fp:file rw_file_perms;
allow fingerprintd system_data_file:sock_file unlink;
allow fingerprintd sysfs_fpc:dir r_dir_perms;
allow fingerprintd sysfs_fpc:file rw_file_perms;
allow fingerprintd tee_device:chr_file { ioctl open read write };
allow fingerprintd uhid_device:chr_file rw_file_perms;

2
sepolicy/init.te
View File

@@ -4,7 +4,7 @@ allow init sensors_device:chr_file { write ioctl };
allow init tee_device:chr_file { write ioctl };
allow init servicemanager:binder { transfer call };
allow init system_server:binder call;
allow init system_server:binder { transfer call };
allow init property_socket:sock_file write;
allow init socket_device:sock_file { create setattr unlink };

1
sepolicy/priv_app.te
View File

@@ -1 +1,2 @@
allow priv_app device:dir r_dir_perms;
allow priv_app persist_file:filesystem getattr;

1
sepolicy/qti_init_shell.te Normal file
View File

@@ -0,0 +1 @@
allow qti_init_shell bluetooth_loader_exec:file { open read };

1
sepolicy/radio.te Normal file
View File

@@ -0,0 +1 @@
allow radio system_app_data_file:dir getattr;

10
sepolicy/rild.te
View File

@@ -1,2 +1,12 @@
allow rild fsg_file:file r_file_perms;
allow rild persist_file:dir search;
allow rild persist_file:file rw_file_perms;
allow rild cutback_data_file:dir rw_dir_perms;
allow rild cutback_data_file:sock_file rw_file_perms;
allow rild sensorservice_service:service_manager find;
allow rild system_server:binder { transfer call };
allow rild system_server:unix_stream_socket { read getopt write };
allow rild wpa:unix_dgram_socket sendto;
allow rild wpa_socket:sock_file { read write };

2
sepolicy/system_app.te
View File

@@ -1 +1,3 @@
allow system_app sysfs_homebutton:file rw_file_perms;
allow system_app fingerprintd:binder call;

3
sepolicy/system_server.te
View File

@@ -1,2 +1,5 @@
allow system_server persist_file:dir rw_dir_perms;
allow system_server persist_file:file rw_file_perms;
allow system_server rild:binder transfer;
allow system_server sysfs_capsense:dir search;

1
sepolicy/tee.te Normal file
View File

@@ -0,0 +1 @@
allow tee persist_file:file r_file_perms;

4
sepolicy/ueventd.te
View File

@@ -2,3 +2,7 @@ allow ueventd device:chr_file { relabelfrom relabelto };
allow ueventd sysfs_mmi_fp:file w_file_perms;
allow ueventd sysfs_mmi_touch:file w_file_perms;
allow ueventd sysfs_mmi_touch:dir search;
allow ueventd synaptics_rmi_device:chr_file rw_file_perms;
allow ueventd sysfs_fpc:file rw_file_perms;
allow ueventd sysfs_sensors:file rw_file_perms;

2
sepolicy/wpa.te Normal file
View File

@@ -0,0 +1,2 @@
allow wpa cutback_data_file:sock_file write;
allow wpa rild:unix_dgram_socket sendto;

1
sepolicy/zygote.te Normal file
View File

@@ -0,0 +1 @@
allow zygote self:capability sys_nice;