Piteball
/
android_device_samsung_klte-common
mirror of https://github.com/ripee/android_device_samsung_klte-common.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

klte-common: Stop abusing global contexts for fingerprint 

* vcs_device is used to label /dev/vcs*, which are virtual consoles
* Create and use our own label for /dev/vfsspi so our fingerprint
  hal can access it, and rename vcs_data_file while we're at it

Change-Id: I01f0e8c4924d3847383319ce59dbbf802f89a36b
This commit is contained in:
Paul Keith 2018-04-21 05:36:43 +02:00
parent 12e09aa4d8
commit 4cab6270ec
5 changed files with 10 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sepolicy/common/device.te Normal file
View File

@ -0,0 +1,2 @@
# Fingerprint
type vfsspi_device, dev_type;

2
sepolicy/common/file.te
View File

@ -1 +1 @@
type vcs_data_file, file_type, data_file_type;
type vfsspi_data_file, file_type, data_file_type;

4
sepolicy/common/file_contexts
View File

@ -1,9 +1,9 @@
# data files
/data/validity(/.*)? u:object_r:vcs_data_file:s0
/data/validity(/.*)? u:object_r:vfsspi_data_file:s0
# device nodes
/dev/ttyHS3 u:object_r:audio_device:s0
/dev/vfsspi u:object_r:vcs_device:s0
/dev/vfsspi u:object_r:vfsspi_device:s0
# sysfs
/sys/devices(/.*)?/input/input[1-2]/enabled u:object_r:sysfs_hal_pwr:s0

6
sepolicy/common/hal_fingerprint_default.te
View File

@ -1,6 +1,6 @@
r_dir_file(hal_fingerprint_default, firmware_file)
allow hal_fingerprint_default tee_device:chr_file rw_file_perms;
allow hal_fingerprint_default vcs_data_file:dir rw_dir_perms;
allow hal_fingerprint_default vcs_data_file:file create_file_perms;
allow hal_fingerprint_default vcs_device:chr_file rw_file_perms;
allow hal_fingerprint_default vfsspi_data_file:dir rw_dir_perms;
allow hal_fingerprint_default vfsspi_data_file:file create_file_perms;
allow hal_fingerprint_default vfsspi_device:chr_file rw_file_perms;

4
sepolicy/common/tee.te
View File

@ -1,2 +1,2 @@
allow tee vcs_data_file:dir create_dir_perms;
allow tee vcs_data_file:file create_file_perms;
allow tee vfsspi_data_file:dir create_dir_perms;
allow tee vfsspi_data_file:file create_file_perms;