Piteball/android_device_samsung_msm8226-common
1
0
Fork 0
mirror of https://github.com/S3NEO/android_device_samsung_msm8226-common.git synced 2024-11-06 21:55:45 +00:00
Code Issues Projects Releases Packages Wiki Activity
android_device_samsung_msm8.../sepolicy/common/file_contexts

98 lines
6.1 KiB
Text
Raw Permalink Normal View History

msm8974-common: sepolicy: Import common sepolicy from klte-common * The bulk of the device family policy was common and applicable to all Samsung msm8974-devices. Move that common stuff here to ease maintenance. Change-Id: I86516adfb1b9c55a6959a7faf4ee424a4b3385c8
2018-02-03 22:04:39 +00:00
# block devices
/dev/block/platform/msm_sdcc\.1/by-name/efs u:object_r:efs_block_device:s0
/dev/block/platform/msm_sdcc\.1/by-name/fota u:object_r:misc_block_device:s0
# data files
/data/.cid.info u:object_r:wifi_data_file:s0
/data/.wifiver.info u:object_r:wifi_data_file:s0
# device nodes
/dev/batch_io u:object_r:sensors_device:s0
/dev/bcm2079x u:object_r:nfc_device:s0
/dev/btlock u:object_r:bluetooth_device:s0
/dev/pn547 u:object_r:nfc_device:s0
/dev/rfkill u:object_r:wlan_device:s0
/dev/sec-nfc u:object_r:nfc_device:s0
# efs files
/efs/bluetooth(/.*)? u:object_r:bluetooth_efs_file:s0
/efs/wifi(/.*)? u:object_r:wifi_efs_file:s0
# firmware
/system/vendor/firmware/bcm(.*).hcd u:object_r:bt_fw_file:s0
/system/vendor/firmware/bcm2079x(.*).ncd u:object_r:nfc_fw_file:s0
/system/vendor/firmware/libpn547_fw.so u:object_r:nfc_fw_file:s0
msm8226-common: sepolicy: Label our custom sensors service Change-Id: I331abeac851cd92b32990ff797dff506dd67e503
2018-11-16 02:50:49 +00:00
# executeables
msm8226-common: Transition to consumerir HIDL hal
2020-05-15 20:50:03 +00:00
/(vendor|system/vendor)/bin/hw/android\.hardware\.ir@1\.0-service\.samsung u:object_r:hal_ir_default_exec:s0
msm8226-common: sepolicy: Label our custom sensors service Change-Id: I331abeac851cd92b32990ff797dff506dd67e503
2018-11-16 02:50:49 +00:00
/(vendor|system/vendor)/bin/hw/android\.hardware\.sensors@1\.0-service.samsung8226 u:object_r:hal_sensors_default_exec:s0
msm8226-common: hal_lineage_livedisplay_default -> hal_lineage_livedisplay_sysfs Change-Id: If8954290c41913b7453a1cba4d67f7a63d08d2dd
2019-06-16 14:05:23 +00:00
/(vendor|system/vendor)/bin/hw/vendor\.lineage\.livedisplay@2\.0-service\.samsung-qcom u:object_r:hal_lineage_livedisplay_sysfs_exec:s0
msm8226-common: Build vendor.lineage.touch HAL from hardware/samsung Change-Id: I6eca1e9875cb5793a3a45c6e77bc201946ebd897
2019-01-08 23:47:48 +00:00
/(vendor|system/vendor)/bin/hw/vendor\.lineage\.touch@1\.0-service\.samsung u:object_r:hal_lineage_touch_default_exec:s0
msm8226-common: update and cleanup sepolicy
2019-10-12 07:31:06 +00:00
/(vendor|system/vendor)/bin/hw/android\.hardware\.light@2\.0-service\.samsung u:object_r:hal_light_default_exec:s0
msm8974-common: sepolicy: Import common sepolicy from klte-common * The bulk of the device family policy was common and applicable to all Samsung msm8974-devices. Move that common stuff here to ease maintenance. Change-Id: I86516adfb1b9c55a6959a7faf4ee424a4b3385c8
2018-02-03 22:04:39 +00:00
# sockets
/data/cam_socket3 u:object_r:camera_socket:s0
# sysfs
msm8226-common: sepolicy: Label sysfs_msmuart_file, resolve denials * avc: denied { setattr } for name="clock" dev="sysfs" ino=18914 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msmuart_file:s0 tclass=file permissive=1 Change-Id: Iaf5fe6791344dcf419242599eb6c9272c61cd707
2018-11-17 00:39:18 +00:00
/sys/devices/[a-f0-9]+\.uart(/.*)? u:object_r:sysfs_msmuart_file:s0
msm8226-common: sepolicy: Broaden sysfs_bluetooth_writable, resolve denials Change-Id: Iff3645e36ece2126f3697bb0389394415be16529
2018-11-16 02:55:06 +00:00
/sys/devices/platform/bcm[0-9]+_bluetooth/rfkill/rfkill0(/.*)? u:object_r:sysfs_bluetooth_writable:s0
msm8974-common: sepolicy: Resolve misc denials avc: denied { chown } for capability=0 scontext=u:r:thermal-engine:s0 tcontext=u:r:thermal-engine:s0 tclass=capability permissive=0 avc: denied { find } for interface=android.hardware.camera.provider::ICameraProvider pid=1315 scontext=u:r:mediaserver:s0 tcontext=u:object_r:hal_camera_hwservice:s0 tclass=hwservice_manager permissive=0 avc: denied { getattr } for pid=1940 comm="mount.ntfs" path="/dev/block/mmcblk0p23" dev="tmpfs" ino=6957 scontext=u:r:vold:s0 tcontext=u:object_r:system_block_device:s0 tclass=blk_file permissive=0 avc: denied { read write } for pid=1370 comm="mm-qcamera-daem" name="rear_corever" dev="sysfs" ino=24696 scontext=u:r:mm-qcamerad:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 avc: denied { search } for pid=561 comm="mm-qcamera-daem" name="camera" dev="sysfs" ino=24680 scontext=u:r:mm-qcamerad:s0 tcontext=u:object_r:sysfs_camera:s0 tclass=dir permissive=0 avc: denied { getattr } for pid=1950 comm="mount.ntfs" path="/dev/block/mmcblk0p24" dev="tmpfs" ino=8134 scontext=u:r:vold:s0 tcontext=u:object_r:cache_block_device:s0 tclass=blk_file permissive=0 avc: denied { getattr } for pid=1926 comm="fsck.ntfs" path="/dev/block" dev="tmpfs" ino=6956 scontext=u:r:fsck_untrusted:s0 tcontext=u:object_r:block_device:s0 tclass=dir permissive=0 avc: denied { getattr } for pid=1948 comm="mount.ntfs" path="/dev/block/mmcblk0p12" dev="tmpfs" ino=8090 scontext=u:r:vold:s0 tcontext=u:object_r:efs_block_device:s0 tclass=blk_file permissive=0 avc: denied { read } for pid=339 comm="mediaserver" name="rear_camfw_load" dev="sysfs" ino=24694 scontext=u:r:mediaserver:s0 tcontext=u:object_r:sysfs_camera:s0 tclass=file permissive=0 Change-Id: Ieb941d135d9f245f4a2bb9abb78e1b84bbef4b38
2018-03-26 12:37:07 +00:00
/sys/devices/virtual/camera(/.*)? u:object_r:sysfs_camera:s0
msm8226-common: sepolicy: Label sysfs_input, resolve denials * avc: denied { read write } for name="poll_delay" dev="sysfs" ino=27687 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_input:s0 tclass=file permissive=1 * avc: denied { open } for name="poll_delay" dev="sysfs" ino=27687 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_input:s0 tclass=file permissive=1 * avc: denied { search } for name="input" dev="sysfs" ino=13030 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_input:s0 tclass=dir permissive=0 * avc: denied { read } for name="input6" dev="sysfs" ino=26725 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_input:s0 tclass=dir permissive=0 * avc: denied { read } for name="device" dev="sysfs" ino=26717 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_input:s0 tclass=lnk_file permissive=0 * avc: denied { read write } for name="poll_delay" dev="sysfs" ino=26946 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_input:s0 tclass=file permissive=0 Change-Id: Id46a02a44e773b99ff61f9a8ff18394c74c80f90
2018-11-16 14:27:03 +00:00
/sys/devices/virtual/input(/.*)? u:object_r:sysfs_input:s0
[SQUASH]: initial bringup of samsung msm8226-common repo from msm8974-common * Rename msm8974-common -> msm8226-common * Import the old msm8226-common camera wrapper and apply : - https://github.com/LineageOS/android_device_samsung_klte-common/commit/45e3438b260dba2d08ad9a83ea95fa27595c8f8a#diff-dd6d2dcc679d12b9430a9787bab45b33 - https://github.com/LineageOS/android_device_samsung_klte-common/commit/737bd8c3960c43ab846a3320856d966a02dea898#diff-dd6d2dcc679d12b9430a9787bab45b33 - https://github.com/LineageOS/android_device_samsung_klte-common/commit/a79e72b246801dbd8cf031361834965d17ab1a01#diff-dd6d2dcc679d12b9430a9787bab45b33 - https://github.com/LineageOS/android_device_samsung_klte-common/commit/d4dadbaff0acc18a5482325e148f7581b0118845#diff-dd6d2dcc679d12b9430a9787bab45b33 - https://github.com/LineageOS/android_device_samsung_klte-common/commit/c2eb30c314e45e7f244f131d5483148ee8f1e22d#diff-dd6d2dcc679d12b9430a9787bab45b33 - https://github.com/LineageOS/android_device_samsung_klte-common/commit/9ac995b9019be031468f857e795b6bd0b6ae24b4#diff-dd6d2dcc679d12b9430a9787bab45b33 * Remove msm8974 keylayout in favour of msm8226 ones * Add wifi/prima relate configs for Qualcomm WIFI * Import libwncss from our old msm8226-common branch * Remove AvancedDisplay overlay as our panel does not support mDNIe * Import rootdir files from stock SM-G800H release, rework it taking as example klte one and import stock ondemand governor parameters * Adapt seccomp policy for msm8226 * Adapt sensor multihal for msm8226 * Adapt sepolicy for msm8226-common
2019-10-07 08:07:36 +00:00
/sys/devices/.*bcl.*(/.*)? u:object_r:sysfs_thermal:s0
msm8226-common: update and cleanup sepolicy
2019-10-12 07:31:06 +00:00
/sys/module/wlan/parameters/fwpath u:object_r:sysfs_wifi_writeable:s0
msm8974-common: Wire up mDNIe features Change-Id: Ib5d2825bb50c90b6743157bd624e7156c6d5ad01
2018-02-21 20:53:05 +00:00
msm8226-common: sepolicy: Label sysfs_batteryinfo, resolve denials * avc: denied { setattr } for name="siop_level" dev="sysfs" ino=29912 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1 * avc: denied { search } for name="battery.95" dev="sysfs" ino=3264 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=1 * avc: denied { read } for name="batt_temp_adc" dev="sysfs" ino=28739 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1 * avc: denied { open } for name="batt_temp_adc" dev="sysfs" ino=28739 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1 Change-Id: Ie3098da96eeed27a9403e3c311fe011c1f359561
2018-10-20 23:21:50 +00:00
# sysfs - battery/charger
/sys/devices/battery\.[0-9]+/power_supply(/.*)? u:object_r:sysfs_batteryinfo:s0
/sys/devices/i2c\.[0-9]+/i2c-[0-9]+/[0-9]+-[a-z0-9]+/max[a-z0-9]+-charger/power_supply(/.*)? u:object_r:sysfs_batteryinfo:s0
/sys/devices/i2c\.[0-9]+/i2c-[0-9]+/[0-9]+-[a-z0-9]+/power_supply(/.*)? u:object_r:sysfs_batteryinfo:s0
/sys/devices/msm_dwc3/power_supply(/.*)? u:object_r:sysfs_batteryinfo:s0
msm8226-common: fix offline charging
2019-10-02 19:32:07 +00:00
/sys/devices/[a-z0-9]+\.i2c/i2c-[0-9]+/[0-9]+-[0-9]+/power_supply(/.*)? u:object_r:sysfs_batteryinfo:s0
/sys/devices/qpnp-bms-[0-9]+/power_supply(/.*)? u:object_r:sysfs_batteryinfo:s0
/sys/devices/qpnp-charger-[0-9]+/power_supply(/.*)? u:object_r:sysfs_batteryinfo:s0
msm8226-common: sepolicy: Label sysfs_batteryinfo, resolve denials * avc: denied { setattr } for name="siop_level" dev="sysfs" ino=29912 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1 * avc: denied { search } for name="battery.95" dev="sysfs" ino=3264 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=dir permissive=1 * avc: denied { read } for name="batt_temp_adc" dev="sysfs" ino=28739 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1 * avc: denied { open } for name="batt_temp_adc" dev="sysfs" ino=28739 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_batteryinfo:s0 tclass=file permissive=1 Change-Id: Ie3098da96eeed27a9403e3c311fe011c1f359561
2018-10-20 23:21:50 +00:00
msm8226-common: sepolicy: Label sysfs_disk_stat nodes * avc: denied { read } for name="stat" dev="sysfs" ino=26461 scontext=u:r:storaged:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 Change-Id: I4b7258d069801f542da8c7f5ca8242ea32f12bca
2018-11-13 04:59:24 +00:00
# sysfs - block/storage
msm8226-common: sepolicy: Label additional sysfs_io_sched_tuneable node Change-Id: I2b416123c7d925443df20f518cb2a0bd02935229
2018-11-16 01:26:16 +00:00
/sys/devices/msm_sdcc\.[0-9]/mmc_host/mmc[0-9]/mmc[0-9]:[0-9]+/block/mmcblk[0-9]/bkops_en u:object_r:sysfs_io_sched_tuneable:s0
msm8226-common: sepolicy: Label sysfs_mmc_host, resolve denials * avc: denied { write } for name="control" dev="sysfs" ino=25383 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_mmc_host:s0 tclass=file permissive=1 * avc: denied { open } for name="control" dev="sysfs" ino=25383 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_mmc_host:s0 tclass=file permissive=1 Change-Id: I876d025db9cf1fe67faeccca830ffd53dbf92904
2018-11-16 22:45:08 +00:00
/sys/devices/msm_sdcc\.[0-9]/mmc_host/mmc[0-9]/power(/.*)? u:object_r:sysfs_mmc_host:s0
msm8226-common: sepolicy: Label sysfs_disk_stat nodes * avc: denied { read } for name="stat" dev="sysfs" ino=26461 scontext=u:r:storaged:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 Change-Id: I4b7258d069801f542da8c7f5ca8242ea32f12bca
2018-11-13 04:59:24 +00:00
msm8226-common: sepolicy: Label sysfs_msm_perf, resolve denials * avc: denied { write } for name="suspend_enabled" dev="sysfs" ino=10567 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_perf:s0 tclass=file permissive=1 * avc: denied { open } for name="suspend_enabled" dev="sysfs" ino=10567 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_perf:s0 tclass=file permissive=1 Change-Id: I23d69f0442d126b2a6ac3aaeda5032856a4483f2
2018-11-14 05:09:58 +00:00
# sysfs - cpu/perf
msm8226-common: sepolicy: Label sysfs_socinfo, resolve denials * avc: denied { setattr } for name="soc_iddq" dev="sysfs" ino=5543 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_socinfo:s0 tclass=file permissive=0 Change-Id: Ife248a9cccea19b09b931525606cf4c34344fd9f
2018-11-16 03:46:10 +00:00
/sys/devices/system/soc/soc0(/.*)? u:object_r:sysfs_socinfo:s0
msm8226-common: sepolicy: Label sysfs_msm_perf, resolve denials * avc: denied { write } for name="suspend_enabled" dev="sysfs" ino=10567 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_perf:s0 tclass=file permissive=1 * avc: denied { open } for name="suspend_enabled" dev="sysfs" ino=10567 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_msm_perf:s0 tclass=file permissive=1 Change-Id: I23d69f0442d126b2a6ac3aaeda5032856a4483f2
2018-11-14 05:09:58 +00:00
msm8226-common: sepolicy: More sysfs_graphics, resolve denials * avc: denied { setattr } for name="brightness" dev="sysfs" ino=12913 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_graphics:s0 tclass=file permissive=1 * avc: denied { read } for name="window_type" dev="sysfs" ino=12710 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_graphics:s0 tclass=file permissive=1 * avc: denied { read } for name="window_type" dev="sysfs" ino=12710 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_graphics:s0 tclass=file permissive=0 * avc: denied { search } for name="panel" dev="sysfs" ino=12358 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_graphics:s0 tclass=dir permissive=0 Change-Id: I8597d7be6217816924a8fee854341e4f2fb18562
2018-10-21 14:21:25 +00:00
# sysfs - graphics/panel
/sys/class/mhl(/.*)? u:object_r:sysfs_graphics:s0
/sys/devices/mdp\.[0-9](/.*)? u:object_r:sysfs_graphics:s0
/sys/devices/virtual/graphics/fb0/csc_cfg u:object_r:sysfs_graphics:s0
/sys/devices/virtual/lcd/panel(/.*)? u:object_r:sysfs_graphics:s0
msm8226-common: allow livedisplay to handle screen power reduce Change-Id: I7294f3449c0566e78f3d291d819fa8acd2294755
2019-12-15 20:16:30 +00:00
/sys/devices/fd922800.qcom,mdss_dsi/lcd/panel(/.*)? u:object_r:sysfs_graphics:s0
msm8226-common: sepolicy: Label sysfs_iio, resolve denials * avc: denied { read } for name="devices" dev="sysfs" ino=7783 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_iio:s0 tclass=dir permissive=0 * avc: denied { open } for name="devices" dev="sysfs" ino=7783 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_iio:s0 tclass=dir permissive=0 * avc: denied { write } for name="length" dev="sysfs" ino=26482 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_iio:s0 tclass=file permissive=0 * avc: denied { read } for name="iio:device1" dev="sysfs" ino=26489 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_iio:s0 tclass=lnk_file permissive=0 * avc: denied { read } for name="iio:device0" dev="sysfs" ino=26350 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_iio:s0 tclass=lnk_file permissive=1 * avc: denied { setattr } for name="length" dev="sysfs" ino=26343 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_iio:s0 tclass=file permissive=1 Change-Id: If9b3e9efe4f7c6eec3faf973e0b7aebd96d76ef3
2018-11-16 14:25:43 +00:00
# sysfs - iio
/sys/bus/iio/devices(/.*)? u:object_r:sysfs_iio:s0
/sys/devices/[a-f0-9]+\.spi/spi_master/spi[0-9]+/spi[0-9]+\.0/iio:device[0-9](/.*)? u:object_r:sysfs_iio:s0
msm8226-common: sepolicy: Label sysfs_leds, resolve denials * avc: denied { search } for name="leds" dev="sysfs" ino=7437 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_leds:s0 tclass=dir permissive=1 * avc: denied { setattr } for name="led_r" dev="sysfs" ino=25718 scontext=u:r:init:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 Change-Id: I8840e28b3aa72e60d5c15cad66f043a36a15c771
2018-11-14 14:21:38 +00:00
# sysfs - leds
/sys/devices/i2c\.[0-9]+/i2c-[0-9]+/[0-9]+-[a-z0-9]+/leds(/.*)? u:object_r:sysfs_leds:s0
/sys/devices/i2c\.[0-9]+/i2c-[0-9]+/[0-9]+-[a-z0-9]+/max[a-z0-9]+-led/leds(/.*)? u:object_r:sysfs_leds:s0
msm8226-common: update and cleanup sepolicy
2019-10-12 07:31:06 +00:00
/sys/class/leds(/.*)? u:object_r:sysfs_leds:s0
msm8226-common: use regex for brightness path
2019-12-21 05:09:27 +00:00
/sys/devices/fd900000.qcom,mdss_mdp/qcom,mdss_fb_primary(.*)/leds/lcd-backlight(/.*)? u:object_r:sysfs_leds:s0
msm8226-common: selinux: add backlight path for panel and button brightness to file_context This fixes backlight dimming not working on enforcing builds Change-Id: Ic0b99ddaa502727ac8e4f34ce2dcf3e3187c060d
2019-10-18 20:07:48 +00:00
/sys/devices/devices/i2c.82/i2c-21/21-0020/leds/button-backlight(/.*)? u:object_r:sysfs_leds:s0
msm8226-common: sepolicy: Label sysfs_sec_* types, resolve denials * Rename sysfs_sec type to sysfs_sec_key * Add additional sysfs_sec_* types as appropriate * avc: denied { read } for name="temp_adc" dev="sysfs" ino=10538 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_sec_thermistor:s0 tclass=file permissive=1 * avc: denied { open } for name="temp_adc" dev="sysfs" ino=10538 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_sec_thermistor:s0 tclass=file permissive=1 * avc: denied { write } for name="ir_send" dev="sysfs" ino=21339 scontext=u:r:system_server:s0 tcontext=u:object_r:sysfs_sec_ir:s0 tclass=file permissive=1 * avc: denied { write } for name="led_blink" dev="sysfs" ino=25722 scontext=u:r:system_server:s0 tcontext=u:object_r:sysfs_sec_led:s0 tclass=file permissive=1 * avc: denied { write } for name="brightness" dev="sysfs" ino=23467 scontext=u:r:system_server:s0 tcontext=u:object_r:sysfs_sec_touchkey:s0 tclass=file permissive=1 * avc: denied { setattr } for name="ir_send" dev="sysfs" ino=21339 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_ir:s0 tclass=file permissive=1 * avc: denied { setattr } for name="hall_irq_ctrl" dev="sysfs" ino=29565 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_key:s0 tclass=file permissive=1 * avc: denied { setattr } for name="epen_firm_update" dev="sysfs" ino=23585 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_epen:s0 tclass=file permissive=1 * avc: denied { setattr } for name="cmd" dev="sysfs" ino=23756 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_tsp:s0 tclass=file permissive=1 * avc: denied { write } for name="wakeup_keys" dev="sysfs" ino=29568 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_key:s0 tclass=file permissive=1 * avc: denied { open } for name="wakeup_keys" dev="sysfs" ino=29568 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_key:s0 tclass=file permissive=1 * avc: denied { read } for name="input" dev="sysfs" ino=24012 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_tsp:s0 tclass=lnk_file permissive=0 * avc: denied { setattr } for name="waketime" dev="sysfs" ino=29035 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_bamdmux:s0 tclass=file permissive=0 * avc: denied { setattr } for name="led_r" dev="sysfs" ino=25719 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_led:s0 tclass=file permissive=0 * avc: denied { setattr } for name="usb_sel" dev="sysfs" ino=28162 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_switch:s0 tclass=file permissive=0 * avc: denied { setattr } for name="brightness" dev="sysfs" ino=23468 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_touchkey:s0 tclass=file permissive=0 * avc: denied { setattr } for name="temperature" dev="sysfs" ino=10538 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_thermistor:s0 tclass=file permissive=0 * avc: denied { setattr } for name="barcode_send" dev="sysfs" ino=19231 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_barcode_emul:s0 tclass=file permissive=0 Change-Id: I66b6d2aab875a2706f2730be9755e8d9805ffb6e
2018-11-15 02:57:03 +00:00
msm8226-common: add mdnie path to file_context
2019-12-18 14:28:35 +00:00
# sysfs - mdnie
/sys/devices/virtual/mdnie/mdnie(/.*)? u:object_r:sysfs_mdnie:s0
msm8226-common: sepolicy: Label sysfs_sec_* types, resolve denials * Rename sysfs_sec type to sysfs_sec_key * Add additional sysfs_sec_* types as appropriate * avc: denied { read } for name="temp_adc" dev="sysfs" ino=10538 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_sec_thermistor:s0 tclass=file permissive=1 * avc: denied { open } for name="temp_adc" dev="sysfs" ino=10538 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_sec_thermistor:s0 tclass=file permissive=1 * avc: denied { write } for name="ir_send" dev="sysfs" ino=21339 scontext=u:r:system_server:s0 tcontext=u:object_r:sysfs_sec_ir:s0 tclass=file permissive=1 * avc: denied { write } for name="led_blink" dev="sysfs" ino=25722 scontext=u:r:system_server:s0 tcontext=u:object_r:sysfs_sec_led:s0 tclass=file permissive=1 * avc: denied { write } for name="brightness" dev="sysfs" ino=23467 scontext=u:r:system_server:s0 tcontext=u:object_r:sysfs_sec_touchkey:s0 tclass=file permissive=1 * avc: denied { setattr } for name="ir_send" dev="sysfs" ino=21339 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_ir:s0 tclass=file permissive=1 * avc: denied { setattr } for name="hall_irq_ctrl" dev="sysfs" ino=29565 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_key:s0 tclass=file permissive=1 * avc: denied { setattr } for name="epen_firm_update" dev="sysfs" ino=23585 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_epen:s0 tclass=file permissive=1 * avc: denied { setattr } for name="cmd" dev="sysfs" ino=23756 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_tsp:s0 tclass=file permissive=1 * avc: denied { write } for name="wakeup_keys" dev="sysfs" ino=29568 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_key:s0 tclass=file permissive=1 * avc: denied { open } for name="wakeup_keys" dev="sysfs" ino=29568 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_key:s0 tclass=file permissive=1 * avc: denied { read } for name="input" dev="sysfs" ino=24012 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_tsp:s0 tclass=lnk_file permissive=0 * avc: denied { setattr } for name="waketime" dev="sysfs" ino=29035 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_bamdmux:s0 tclass=file permissive=0 * avc: denied { setattr } for name="led_r" dev="sysfs" ino=25719 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_led:s0 tclass=file permissive=0 * avc: denied { setattr } for name="usb_sel" dev="sysfs" ino=28162 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_switch:s0 tclass=file permissive=0 * avc: denied { setattr } for name="brightness" dev="sysfs" ino=23468 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_touchkey:s0 tclass=file permissive=0 * avc: denied { setattr } for name="temperature" dev="sysfs" ino=10538 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_thermistor:s0 tclass=file permissive=0 * avc: denied { setattr } for name="barcode_send" dev="sysfs" ino=19231 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sec_barcode_emul:s0 tclass=file permissive=0 Change-Id: I66b6d2aab875a2706f2730be9755e8d9805ffb6e
2018-11-15 02:57:03 +00:00
# sysfs - sec
/sys/devices/platform/sec-thermistor(/.*)? u:object_r:sysfs_sec_thermistor:s0
/sys/devices/virtual/sec/bamdmux(/.*)? u:object_r:sysfs_sec_bamdmux:s0
/sys/devices/virtual/sec/led(/.*)? u:object_r:sysfs_sec_led:s0
/sys/devices/virtual/sec/sec_barcode_emul(/.*)? u:object_r:sysfs_sec_barcode_emul:s0
/sys/devices/virtual/sec/sec_epen(/.*)? u:object_r:sysfs_sec_epen:s0
/sys/devices/virtual/sec/sec_ir(/.*)? u:object_r:sysfs_sec_ir:s0
/sys/devices/virtual/sec/sec_key(/.*)? u:object_r:sysfs_sec_key:s0
/sys/devices/virtual/sec/sec_touchkey(/.*)? u:object_r:sysfs_sec_touchkey:s0
/sys/devices/virtual/sec/switch(/.*)? u:object_r:sysfs_sec_switch:s0
/sys/devices/virtual/sec/tsp(/.*)? u:object_r:sysfs_sec_tsp:s0
msm8226-common: sepolicy: Label sysfs_sensors, resolve denials * avc: denied { read } for name="ssp_sensor" dev="sysfs" ino=27809 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sensors:s0 tclass=lnk_file permissive=1 * avc: denied { setattr } for name="temperature" dev="sysfs" ino=10861 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_sensors:s0 tclass=file permissive=0 Change-Id: I2e4a436704ed019af153da880d7becbde4b0ab11
2018-11-15 03:08:14 +00:00
# sysfs - sensors
/sys/devices/virtual/sensors(/.*)? u:object_r:sysfs_sensors:s0
msm8226-common: sepolicy: Label sysfs_usb_otg, resolve denials * avc: denied { setattr } for name="booster" dev="sysfs" ino=23129 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_usb_otg:s0 tclass=file permissive=1 Change-Id: Iffb33bd7647026107473fb63e82d942ad027f9f9
2018-11-30 21:09:23 +00:00
# sysfs - usb
msm8226-common: update and cleanup sepolicy
2019-10-12 07:31:06 +00:00
/sys/devices/virtual/host_notify/usb_otg(/.*)? u:object_r:sysfs_usb_otg:s0
Reference in a new issue Copy permalink