[SQUASH] [8 PART] msm8226-common: sepolicy updates (8)

sepolicy/common/flags_health_check.te

@@ -0,0 +1,115 @@
+allow flags_health_check alarm_boot_prop:file { getattr open };
+allow flags_health_check alarm_handled_prop:file { getattr open };
+allow flags_health_check alarm_instance_prop:file { getattr open };
+allow flags_health_check apexd_prop:file { getattr open };
+allow flags_health_check bg_boot_complete_prop:file { getattr open };
+allow flags_health_check bg_daemon_prop:file { getattr open };
+allow flags_health_check bluetooth_prop:file { getattr open };
+allow flags_health_check boot_animation_prop:file { getattr open };
+allow flags_health_check boot_mode_prop:file { getattr open };
+allow flags_health_check bootloader_boot_reason_prop:file { getattr open };
+allow flags_health_check boottime_prop:file { getattr open };
+allow flags_health_check bpf_progs_loaded_prop:file { getattr open };
+allow flags_health_check bservice_prop:file { getattr open };
+allow flags_health_check camera_prop:file { getattr open };
+allow flags_health_check coresight_prop:file { getattr open };
+allow flags_health_check crash_prop:file { getattr open };
+allow flags_health_check ctl_LKCore_prop:file { getattr open };
+allow flags_health_check ctl_adbd_prop:file { getattr open };
+allow flags_health_check ctl_bootanim_prop:file { getattr open };
+allow flags_health_check ctl_bugreport_prop:file { getattr open };
+allow flags_health_check ctl_console_prop:file { getattr open };
+allow flags_health_check ctl_default_prop:file { getattr open };
+allow flags_health_check ctl_dumpstate_prop:file { getattr open };
+allow flags_health_check ctl_fuse_prop:file { getattr open };
+allow flags_health_check ctl_gsid_prop:file { getattr open };
+allow flags_health_check ctl_hbtp_prop:file { getattr open };
+allow flags_health_check ctl_interface_restart_prop:file { getattr open };
+allow flags_health_check ctl_interface_start_prop:file { getattr open };
+allow flags_health_check ctl_interface_stop_prop:file { getattr open };
+allow flags_health_check ctl_mdnsd_prop:file { getattr open };
+allow flags_health_check ctl_netmgrd_prop:file { getattr open };
+allow flags_health_check ctl_port-bridge_prop:file { getattr open };
+allow flags_health_check ctl_qmuxd_prop:file { getattr open };
+allow flags_health_check ctl_restart_prop:file { getattr open };
+allow flags_health_check ctl_rildaemon_prop:file { getattr open };
+allow flags_health_check ctl_sigstop_prop:file { getattr open };
+allow flags_health_check ctl_start_prop:file { getattr open };
+allow flags_health_check ctl_stop_prop:file { getattr open };
+allow flags_health_check ctl_vendor_imsrcsservice_prop:file { getattr open };
+allow flags_health_check ctl_vendor_wigigsvc_prop:file { getattr open };
+allow flags_health_check device_logging_prop:file { getattr open };
+allow flags_health_check diag_mdlog_prop:file { getattr open };
+allow flags_health_check dolby_prop:file { getattr open };
+allow flags_health_check dumpstate_options_prop:file { getattr open };
+allow flags_health_check dynamic_system_prop:file { getattr open };
+allow flags_health_check firstboot_prop:file { getattr open };
+allow flags_health_check fm_prop:file { getattr open };
+allow flags_health_check freq_prop:file { getattr open };
+allow flags_health_check fst_prop:file { getattr open };
+allow flags_health_check gamed_prop:file { getattr open };
+allow flags_health_check graphics_vulkan_prop:file { getattr open };
+allow flags_health_check gsid_prop:file { getattr open };
+allow flags_health_check heapprofd_enabled_prop:file { getattr open };
+allow flags_health_check hwservicemanager_prop:file { getattr open };
+allow flags_health_check hwui_prop:file { getattr open };
+allow flags_health_check ipacm-diag_prop:file { getattr open };
+allow flags_health_check ipacm_prop:file { getattr open };
+allow flags_health_check last_boot_reason_prop:file { getattr open };
+allow flags_health_check llkd_prop:file { getattr open };
+allow flags_health_check location_prop:file { getattr open };
+allow flags_health_check logpersistd_logging_prop:file { getattr open };
+allow flags_health_check lowpan_prop:file { getattr open };
+allow flags_health_check lpdumpd_prop:file { getattr open };
+allow flags_health_check mdm_helper_prop:file { getattr open };
+allow flags_health_check mmc_prop:file { getattr open };
+allow flags_health_check mmi_prop:file { getattr open };
+allow flags_health_check mpdecision_prop:file { getattr open };
+allow flags_health_check msm_irqbalance_prop:file { getattr open };
+allow flags_health_check msm_irqbl_sdm630_prop:file { getattr open };
+allow flags_health_check net_dns_prop:file { getattr open };
+allow flags_health_check netd_prop:file { getattr open };
+allow flags_health_check netd_stable_secret_prop:file { getattr open };
+allow flags_health_check nfc_nq_prop:file { getattr open };
+allow flags_health_check nnapi_ext_deny_product_prop:file { getattr open };
+allow flags_health_check opengles_prop:file { getattr open };
+allow flags_health_check overlay_prop:file { getattr open };
+allow flags_health_check per_mgr_state_prop:file { getattr open };
+allow flags_health_check perfd_prop:file { getattr open };
+allow flags_health_check persistent_properties_ready_prop:file { getattr open };
+allow flags_health_check postprocessing_prop:file { getattr open };
+allow flags_health_check ppd_prop:file { getattr open };
+allow flags_health_check qcom_ims_prop:file { getattr open };
+allow flags_health_check qdma_prop:file { getattr open };
+allow flags_health_check qemu_gles_prop:file { getattr open };
+allow flags_health_check qti_prop:file { getattr open };
+allow flags_health_check reschedule_service_prop:file { getattr open };
+allow flags_health_check rmnet_mux_prop:file { getattr open };
+allow flags_health_check safemode_prop:file { getattr open };
+allow flags_health_check scr_enabled_prop:file { getattr open };
+allow flags_health_check sdm_idle_time_prop:file { getattr open };
+allow flags_health_check sensors_prop:file { getattr open };
+allow flags_health_check serialno_prop:file { getattr open };
+allow flags_health_check spcomlib_prop:file { getattr open };
+allow flags_health_check sys_usb_configfs_prop:file { getattr open };
+allow flags_health_check sys_usb_controller_prop:file { getattr open };
+allow flags_health_check sys_usb_tethering_prop:file { getattr open };
+allow flags_health_check system_boot_reason_prop:file { getattr open };
+allow flags_health_check system_lmk_prop:file { getattr open };
+allow flags_health_check system_trace_prop:file { getattr open };
+allow flags_health_check test_boot_reason_prop:file { getattr open };
+allow flags_health_check theme_prop:file { getattr open };
+allow flags_health_check time_prop:file { getattr open };
+allow flags_health_check traced_enabled_prop:file { getattr open };
+allow flags_health_check traced_lazy_prop:file { getattr open };
+allow flags_health_check uicc_prop:file { getattr open };
+allow flags_health_check usf_prop:file { getattr open };
+allow flags_health_check vendor_mpctl_prop:file { getattr open };
+allow flags_health_check vendor_rild_libpath_prop:file { getattr open };
+allow flags_health_check vendor_system_prop:file { getattr open };
+allow flags_health_check vendor_wifi_prop:file { getattr open };
+allow flags_health_check vm_bms_prop:file { getattr open };
+allow flags_health_check wifi_prop:file { getattr open };
+allow flags_health_check wififtmd_prop:file { getattr open };
+allow flags_health_check wigig_prop:file { getattr open };
+allow flags_health_check xlat_prop:file { getattr open };

sepolicy/common/rild.te

@@ -9,3 +9,7 @@ allow rild sysfs_sec_key:file rw_file_perms;
 
 allow rild unlabeled:dir search;
 allow rild unlabeled:file { getattr open read };
+
+allow rild device:chr_file read;
+allow rild device:chr_file open;
+allow rild device:chr_file ioctl;

sepolicy/common/system_server.te

@@ -18,3 +18,4 @@ allow system_server {
 allow system_server init:binder call;
 allow system_server unlabeled:file unlink;
 allow system_server proc:file { getattr open read };
+allow system_server crash_dump:process getpgid;

sepolicy/common/vendor_init.te

@@ -22,4 +22,5 @@ allow vendor_init system_data_file:lnk_file unlink;
 allow vendor_init wcnss_device:chr_file write;
 allow vendor_init wcnss_device:chr_file open;
 allow vendor_init firmware_file:dir create;
-allow vendor_init firmware_file:dir setattr;
+allow vendor_init firmware_file:dir setattr;
+allow vendor_init bluetooth_data_file:file setattr;