diff --git a/sepolicy/common/file_contexts b/sepolicy/common/file_contexts index 92197da..daa8b5a 100644 --- a/sepolicy/common/file_contexts +++ b/sepolicy/common/file_contexts @@ -4,3 +4,10 @@ # DRM /(vendor|system/vendor)/bin/hw/android\.hardware\.drm@1\.3-service\.clearkey u:object_r:hal_drm_clearkey_exec:s0 /data/vendor/mediadrm(/.*)? u:object_r:mediadrm_vendor_data_file:s0 + +# sysfs - iio +/sys/bus/iio/devices/iio:device[0-9]+(/.*)? u:object_r:sysfs_iio:s0 +/sys/devices/[a-f0-9]+\.i2c/i2c-[0-9]+/[0-9]+-[0-9]+/iio:device[0-9](/.*)? u:object_r:sysfs_iio:s0 + +# system files +/(vendor|system/vendor)/bin/init\.input\.sh u:object_r:qti_init_shell_exec:s0 diff --git a/sepolicy/common/fsck.te b/sepolicy/common/fsck.te new file mode 100644 index 0000000..9300732 --- /dev/null +++ b/sepolicy/common/fsck.te @@ -0,0 +1 @@ +allow fsck self:capability dac_override; diff --git a/sepolicy/common/hal_lineage_touch_default.te b/sepolicy/common/hal_lineage_touch_default.te new file mode 100644 index 0000000..cc2fd31 --- /dev/null +++ b/sepolicy/common/hal_lineage_touch_default.te @@ -0,0 +1,3 @@ +allow hal_lineage_touch_default { + sysfs_sec_touchkey +}:file rw_file_perms; diff --git a/sepolicy/common/init.te b/sepolicy/common/init.te new file mode 100644 index 0000000..f6a133e --- /dev/null +++ b/sepolicy/common/init.te @@ -0,0 +1,2 @@ +allow init sysfs:file setattr; +allow init system_file:file execute_no_trans; diff --git a/sepolicy/common/qti_init_shell.te b/sepolicy/common/qti_init_shell.te new file mode 100644 index 0000000..786e076 --- /dev/null +++ b/sepolicy/common/qti_init_shell.te @@ -0,0 +1,8 @@ +allow qti_init_shell bluetooth_efs_file:dir search; +allow qti_init_shell bluetooth_efs_file:file r_file_perms; +allow qti_init_shell bluetooth_loader_exec:file { r_file_perms execute_no_trans execute }; +allow qti_init_shell btnvtool_exec:file execute_no_trans; +allow qti_init_shell efs_file:dir search; +allow qti_init_shell efs_file:file r_file_perms; +allow qti_init_shell toolbox_exec:file { r_file_perms execute_no_trans execute }; +allow qti_init_shell shell_exec:file r_file_perms; diff --git a/sepolicy/common/wcnss-service.te b/sepolicy/common/wcnss-service.te index 8406ab3..a93e2cd 100755 --- a/sepolicy/common/wcnss-service.te +++ b/sepolicy/common/wcnss-service.te @@ -2,4 +2,6 @@ allow wcnss_service misc_block_device:blk_file r_file_perms; allow wcnss_service block_device:dir {search}; allow wcnss_service efs_file:dir search; -allow wcnss_service efs_file:file r_file_perms; \ No newline at end of file +allow wcnss_service efs_file:file r_file_perms; +allow wcnss_service wifi_efs_file:dir search; +allow wcnss_service wifi_efs_file:file r_file_perms; diff --git a/sepolicy/common/zygote.te b/sepolicy/common/zygote.te new file mode 100644 index 0000000..7c7b5c0 --- /dev/null +++ b/sepolicy/common/zygote.te @@ -0,0 +1 @@ +get_prop(zygote, bluetooth_prop);