This repository has been archived on 2025-09-03. You can view files and clone it. You cannot open issues or pull requests or push a commit.
Files
device_oneplus_sm7250-common/sepolicy/vendor/file_contexts
Mimi Wu e8c93af4e7 sm7250-common: sepolicy: Add sepolicy for kernel to access /data/per_boot/zram_swap
type=1400 audit(1581485243.256:88): avc: denied { read } for comm="loop29" path="/data/per_boot/zram_swap" dev="dm-9" ino=9820 scontext=u:r:kernel:s0 tcontext=u:object_r:system_data_file:s0 tclass=file permissive=0

Bug: 147469156
Test: flash full build and find avc errors gone
Change-Id: I48d7684ce3b4ca1ada81011b1cab21007c758ba5
Signed-off-by: Mimi Wu <mimiwu@google.com>
Signed-off-by: aswin7469 <aswinas@pixysos.com>
Signed-off-by: Sandeep-FED <sandymankara11@gmail.com>
Signed-off-by: Sandeep P S <sandymankara11@gmail.com>
2023-01-05 22:18:57 +05:30

86 lines
6.6 KiB
Plaintext

# Binaries
/(vendor|system/vendor)/bin/dashd u:object_r:dashd_exec:s0
/(vendor|system/vendor)/bin/opf-service u:object_r:opf_exec:s0
/(vendor|system/vendor)/bin/tri-state-key-calibrate u:object_r:tri-state-key-calibrate_exec:s0
/(vendor|system/vendor)/bin/vl53l1_daemon_main u:object_r:vl53l1_daemon_main_exec:s0
/(vendor|system/vendor)/bin/wifi-mac-generator u:object_r:wifi-mac-generator_exec:s0
# Block devices
/dev/block/platform/soc/1d84000.ufshc/by-name/config u:object_r:frp_block_device:s0
/dev/block/platform/soc/1d84000.ufshc/by-name/fw_ufs1_[ab] u:object_r:vendor_custom_ab_block_device:s0
/dev/block/platform/soc/1d84000.ufshc/by-name/fw_ufs2_[ab] u:object_r:vendor_custom_ab_block_device:s0
/dev/block/platform/soc/1d84000.ufshc/by-name/logo_[ab] u:object_r:vendor_custom_ab_block_device:s0
/dev/block/platform/soc/1d84000.ufshc/by-name/mdm1oemnvbktmp u:object_r:vendor_efs_boot_dev:s0
/dev/block/platform/soc/1d84000.ufshc/by-name/mdm_oem_dycnvbk u:object_r:vendor_efs_boot_dev:s0
/dev/block/platform/soc/1d84000.ufshc/by-name/mdm_oem_stanvbk u:object_r:vendor_efs_boot_dev:s0
/dev/block/platform/soc/1d84000.ufshc/by-name/oem_cust1_[ab] u:object_r:vendor_custom_ab_block_device:s0
/dev/block/platform/soc/1d84000.ufshc/by-name/oem_cust2_[ab] u:object_r:vendor_custom_ab_block_device:s0
/dev/block/platform/soc/1d84000.ufshc/by-name/oem_dycnvbk u:object_r:vendor_modem_efs_partition_device:s0
/dev/block/platform/soc/1d84000.ufshc/by-name/oem_stanvbk u:object_r:vendor_modem_efs_partition_device:s0
/dev/block/platform/soc/1d84000.ufshc/by-name/opproduct_[ab] u:object_r:vendor_custom_ab_block_device:s0
/dev/block/platform/soc/1d84000.ufshc/by-name/param u:object_r:param_block_device:s0
/dev/block/platform/soc/1d84000.ufshc/by-name/reserve1 u:object_r:reserve1_block_device:s0
/dev/block/platform/soc/1d84000.ufshc/by-name/reserve2 u:object_r:reserve2_block_device:s0
/dev/block/platform/soc/1d84000.ufshc/by-name/spunvm u:object_r:vendor_efs_boot_dev:s0
/dev/block/platform/soc/1d84000.ufshc/by-name/storsec_[ab] u:object_r:vendor_custom_ab_block_device:s0
# Data files
/data/reserve-lib(/.*)? u:object_r:apk_data_file:s0
/data/per_boot(/.*)? u:object_r:per_boot_file:s0
# Devices
/dev/byte-cntr u:object_r:byte_cntr_device:s0
/dev/cc_ctl u:object_r:graphics_device:s0
/dev/dash u:object_r:dash_device:s0
/dev/fragment_monitor u:object_r:fragment_monitor_device:s0
/dev/goodix_fp u:object_r:fingerprintd_device:s0
/dev/ht_ctl u:object_r:graphics_device:s0
/dev/mmw0_thermal u:object_r:therm_device:s0
/dev/mmw1_thermal u:object_r:therm_device:s0
/dev/mmw2_thermal u:object_r:therm_device:s0
/dev/opfeature u:object_r:opf_file:s0
/dev/param u:object_r:param_device:s0
/dev/pn553 u:object_r:nfc_device:s0
/dev/p73 u:object_r:secure_element_device:s0
/dev/skin_thermal u:object_r:therm_device:s0
/dev/stmvl53l1_ranging u:object_r:vl53l1_device:s0
# HALs
/(vendor|system/vendor)/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.3-service\.oneplus u:object_r:hal_fingerprint_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.secure_element@1\.2-service u:object_r:hal_secure_element_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.lineage\.touch@1\.0-service\.oneplus u:object_r:hal_lineage_touch_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.oneplus\.hardware\.camera@1\.0-service u:object_r:hal_cameraHIDL_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.oneplus\.hardware\.CameraMDMHIDL@1\.0-service u:object_r:hal_cameraHIDL_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.oneplus\.hardware\.display@1\.0-service u:object_r:hal_display_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.oneplus\.hardware\.hdcpkey@1\.0-service u:object_r:hal_hdcpkey_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.oneplus\.hardware\.param@1\.0-service u:object_r:hal_param_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.pixelworks\.hardware\.display\.iris-service u:object_r:hal_graphics_composer_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.pixelworks\.hardware\.feature\.irisfeature-service u:object_r:hal_graphics_composer_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.vibrator\.service\.oneplus u:object_r:hal_vibrator_default_exec:s0
# Persist files
/mnt/vendor/persist u:object_r:vendor_data_file:s0
/mnt/vendor/persist/camera(/.*)? u:object_r:oem_file:s0
/mnt/vendor/persist/camera_ae_sync(/.*)? u:object_r:oem_file:s0
/mnt/vendor/persist/dual_camera_calibration(/.*)? u:object_r:oem_file:s0
/mnt/vendor/persist/engineermode(/.*)? u:object_r:oem_file:s0
/mnt/vendor/persist/OPDiagnose(/.*)? u:object_r:oem_file:s0
# Sys files
/sys/module/fsc(/.*)? u:object_r:sysfs_fsc:s0
/sys/module/fuse(/.*)? u:object_r:sysfs_fuse:s0
/sys/module/proc(/.*)? u:object_r:sysfs_dbg:s0
/sys/module/tpd(/.*)? u:object_r:sysfs_tpd:s0
# Sys files (health)
/sys/devices/platform/soc/c440000\.qcom\,spmi/spmi-0/spmi0-02/c440000\.qcom\,spmi\:qcom\,pm7250b\@2\:qpnp\,qg/power_supply/(?!.*wakeup\d+).* u:object_r:vendor_sysfs_battery_supply:s0
# Sys files (wakeup)
/sys/devices(/platform)?/soc/soc:qcom,msm-audio-apr/soc:qcom,msm-audio-apr:qcom,q6core-audio/soc:qcom,msm-audio-apr:qcom,q6core-audio:sound/Listen.[0-9]+.Audio.Service/wakeup(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices(/platform)?/soc/(soc:gpio_keys|a600000.ssusb|soc:gpio_keys|18800000.qcom,icnss|88e0000.qcom,msm-eud)/wakeup/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices(/platform)?/soc/c440000.qcom,spmi/spmi-0/spmi0-00/c440000.qcom,spmi:qcom,pm8150@0:qcom,pm8150_rtc/rtc/rtc0/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/virtual/diag/diag/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/virtual/misc/(msm_wma|msm_amrwb|msm_ape|msm_aac|msm_alac|msm_g711mlaw|msm_qcelp|msm_multi_aac|msm_g711alaw|msm_evrc|msm_mp3|msm_wmapro|msm_amrnb|msm_amrwbplus)/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/virtual/wakeup/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0