From 47cb7fedd7574bc4c533e2dc2e7844c0c20ccb0b Mon Sep 17 00:00:00 2001 From: DJABhipHop Date: Mon, 10 Feb 2020 10:31:56 -0500 Subject: [PATCH] [SQUASH] [8 PART] msm8226-common: sepolicy updates (8) --- sepolicy/common/flags_health_check.te | 115 ++++++++++++++++++++++++++ sepolicy/common/rild.te | 4 + sepolicy/common/system_server.te | 1 + sepolicy/common/vendor_init.te | 3 +- 4 files changed, 122 insertions(+), 1 deletion(-) create mode 100644 sepolicy/common/flags_health_check.te diff --git a/sepolicy/common/flags_health_check.te b/sepolicy/common/flags_health_check.te new file mode 100644 index 0000000..dbfd800 --- /dev/null +++ b/sepolicy/common/flags_health_check.te @@ -0,0 +1,115 @@ +allow flags_health_check alarm_boot_prop:file { getattr open }; +allow flags_health_check alarm_handled_prop:file { getattr open }; +allow flags_health_check alarm_instance_prop:file { getattr open }; +allow flags_health_check apexd_prop:file { getattr open }; +allow flags_health_check bg_boot_complete_prop:file { getattr open }; +allow flags_health_check bg_daemon_prop:file { getattr open }; +allow flags_health_check bluetooth_prop:file { getattr open }; +allow flags_health_check boot_animation_prop:file { getattr open }; +allow flags_health_check boot_mode_prop:file { getattr open }; +allow flags_health_check bootloader_boot_reason_prop:file { getattr open }; +allow flags_health_check boottime_prop:file { getattr open }; +allow flags_health_check bpf_progs_loaded_prop:file { getattr open }; +allow flags_health_check bservice_prop:file { getattr open }; +allow flags_health_check camera_prop:file { getattr open }; +allow flags_health_check coresight_prop:file { getattr open }; +allow flags_health_check crash_prop:file { getattr open }; +allow flags_health_check ctl_LKCore_prop:file { getattr open }; +allow flags_health_check ctl_adbd_prop:file { getattr open }; +allow flags_health_check ctl_bootanim_prop:file { getattr open }; +allow flags_health_check ctl_bugreport_prop:file { getattr open }; +allow flags_health_check ctl_console_prop:file { getattr open }; +allow flags_health_check ctl_default_prop:file { getattr open }; +allow flags_health_check ctl_dumpstate_prop:file { getattr open }; +allow flags_health_check ctl_fuse_prop:file { getattr open }; +allow flags_health_check ctl_gsid_prop:file { getattr open }; +allow flags_health_check ctl_hbtp_prop:file { getattr open }; +allow flags_health_check ctl_interface_restart_prop:file { getattr open }; +allow flags_health_check ctl_interface_start_prop:file { getattr open }; +allow flags_health_check ctl_interface_stop_prop:file { getattr open }; +allow flags_health_check ctl_mdnsd_prop:file { getattr open }; +allow flags_health_check ctl_netmgrd_prop:file { getattr open }; +allow flags_health_check ctl_port-bridge_prop:file { getattr open }; +allow flags_health_check ctl_qmuxd_prop:file { getattr open }; +allow flags_health_check ctl_restart_prop:file { getattr open }; +allow flags_health_check ctl_rildaemon_prop:file { getattr open }; +allow flags_health_check ctl_sigstop_prop:file { getattr open }; +allow flags_health_check ctl_start_prop:file { getattr open }; +allow flags_health_check ctl_stop_prop:file { getattr open }; +allow flags_health_check ctl_vendor_imsrcsservice_prop:file { getattr open }; +allow flags_health_check ctl_vendor_wigigsvc_prop:file { getattr open }; +allow flags_health_check device_logging_prop:file { getattr open }; +allow flags_health_check diag_mdlog_prop:file { getattr open }; +allow flags_health_check dolby_prop:file { getattr open }; +allow flags_health_check dumpstate_options_prop:file { getattr open }; +allow flags_health_check dynamic_system_prop:file { getattr open }; +allow flags_health_check firstboot_prop:file { getattr open }; +allow flags_health_check fm_prop:file { getattr open }; +allow flags_health_check freq_prop:file { getattr open }; +allow flags_health_check fst_prop:file { getattr open }; +allow flags_health_check gamed_prop:file { getattr open }; +allow flags_health_check graphics_vulkan_prop:file { getattr open }; +allow flags_health_check gsid_prop:file { getattr open }; +allow flags_health_check heapprofd_enabled_prop:file { getattr open }; +allow flags_health_check hwservicemanager_prop:file { getattr open }; +allow flags_health_check hwui_prop:file { getattr open }; +allow flags_health_check ipacm-diag_prop:file { getattr open }; +allow flags_health_check ipacm_prop:file { getattr open }; +allow flags_health_check last_boot_reason_prop:file { getattr open }; +allow flags_health_check llkd_prop:file { getattr open }; +allow flags_health_check location_prop:file { getattr open }; +allow flags_health_check logpersistd_logging_prop:file { getattr open }; +allow flags_health_check lowpan_prop:file { getattr open }; +allow flags_health_check lpdumpd_prop:file { getattr open }; +allow flags_health_check mdm_helper_prop:file { getattr open }; +allow flags_health_check mmc_prop:file { getattr open }; +allow flags_health_check mmi_prop:file { getattr open }; +allow flags_health_check mpdecision_prop:file { getattr open }; +allow flags_health_check msm_irqbalance_prop:file { getattr open }; +allow flags_health_check msm_irqbl_sdm630_prop:file { getattr open }; +allow flags_health_check net_dns_prop:file { getattr open }; +allow flags_health_check netd_prop:file { getattr open }; +allow flags_health_check netd_stable_secret_prop:file { getattr open }; +allow flags_health_check nfc_nq_prop:file { getattr open }; +allow flags_health_check nnapi_ext_deny_product_prop:file { getattr open }; +allow flags_health_check opengles_prop:file { getattr open }; +allow flags_health_check overlay_prop:file { getattr open }; +allow flags_health_check per_mgr_state_prop:file { getattr open }; +allow flags_health_check perfd_prop:file { getattr open }; +allow flags_health_check persistent_properties_ready_prop:file { getattr open }; +allow flags_health_check postprocessing_prop:file { getattr open }; +allow flags_health_check ppd_prop:file { getattr open }; +allow flags_health_check qcom_ims_prop:file { getattr open }; +allow flags_health_check qdma_prop:file { getattr open }; +allow flags_health_check qemu_gles_prop:file { getattr open }; +allow flags_health_check qti_prop:file { getattr open }; +allow flags_health_check reschedule_service_prop:file { getattr open }; +allow flags_health_check rmnet_mux_prop:file { getattr open }; +allow flags_health_check safemode_prop:file { getattr open }; +allow flags_health_check scr_enabled_prop:file { getattr open }; +allow flags_health_check sdm_idle_time_prop:file { getattr open }; +allow flags_health_check sensors_prop:file { getattr open }; +allow flags_health_check serialno_prop:file { getattr open }; +allow flags_health_check spcomlib_prop:file { getattr open }; +allow flags_health_check sys_usb_configfs_prop:file { getattr open }; +allow flags_health_check sys_usb_controller_prop:file { getattr open }; +allow flags_health_check sys_usb_tethering_prop:file { getattr open }; +allow flags_health_check system_boot_reason_prop:file { getattr open }; +allow flags_health_check system_lmk_prop:file { getattr open }; +allow flags_health_check system_trace_prop:file { getattr open }; +allow flags_health_check test_boot_reason_prop:file { getattr open }; +allow flags_health_check theme_prop:file { getattr open }; +allow flags_health_check time_prop:file { getattr open }; +allow flags_health_check traced_enabled_prop:file { getattr open }; +allow flags_health_check traced_lazy_prop:file { getattr open }; +allow flags_health_check uicc_prop:file { getattr open }; +allow flags_health_check usf_prop:file { getattr open }; +allow flags_health_check vendor_mpctl_prop:file { getattr open }; +allow flags_health_check vendor_rild_libpath_prop:file { getattr open }; +allow flags_health_check vendor_system_prop:file { getattr open }; +allow flags_health_check vendor_wifi_prop:file { getattr open }; +allow flags_health_check vm_bms_prop:file { getattr open }; +allow flags_health_check wifi_prop:file { getattr open }; +allow flags_health_check wififtmd_prop:file { getattr open }; +allow flags_health_check wigig_prop:file { getattr open }; +allow flags_health_check xlat_prop:file { getattr open }; \ No newline at end of file diff --git a/sepolicy/common/rild.te b/sepolicy/common/rild.te index a44127d..bea054d 100644 --- a/sepolicy/common/rild.te +++ b/sepolicy/common/rild.te @@ -9,3 +9,7 @@ allow rild sysfs_sec_key:file rw_file_perms; allow rild unlabeled:dir search; allow rild unlabeled:file { getattr open read }; + +allow rild device:chr_file read; +allow rild device:chr_file open; +allow rild device:chr_file ioctl; \ No newline at end of file diff --git a/sepolicy/common/system_server.te b/sepolicy/common/system_server.te index 92e0ad0..23f3302 100644 --- a/sepolicy/common/system_server.te +++ b/sepolicy/common/system_server.te @@ -18,3 +18,4 @@ allow system_server { allow system_server init:binder call; allow system_server unlabeled:file unlink; allow system_server proc:file { getattr open read }; +allow system_server crash_dump:process getpgid; \ No newline at end of file diff --git a/sepolicy/common/vendor_init.te b/sepolicy/common/vendor_init.te index ac41d89..3701dc0 100644 --- a/sepolicy/common/vendor_init.te +++ b/sepolicy/common/vendor_init.te @@ -22,4 +22,5 @@ allow vendor_init system_data_file:lnk_file unlink; allow vendor_init wcnss_device:chr_file write; allow vendor_init wcnss_device:chr_file open; allow vendor_init firmware_file:dir create; -allow vendor_init firmware_file:dir setattr; \ No newline at end of file +allow vendor_init firmware_file:dir setattr; +allow vendor_init bluetooth_data_file:file setattr;