lineage/android_device_samsung_msm8974-common
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
1357777a0f
android_device_samsung_msm8.../sepolicy/common/file_contexts

53 lines
2.8 KiB
Plaintext
Raw Normal View History

msm8974-common: sepolicy: Import common sepolicy from klte-common * The bulk of the device family policy was common and applicable to all Samsung msm8974-devices. Move that common stuff here to ease maintenance. Change-Id: I86516adfb1b9c55a6959a7faf4ee424a4b3385c8
2018-02-03 23:04:39 +01:00
# block devices
/dev/block/platform/msm_sdcc\.1/by-name/efs u:object_r:efs_block_device:s0
/dev/block/platform/msm_sdcc\.1/by-name/fota u:object_r:misc_block_device:s0
# data files
/data/.cid.info u:object_r:wifi_data_file:s0
/data/.wifiver.info u:object_r:wifi_data_file:s0
# device nodes
/dev/batch_io u:object_r:sensors_device:s0
/dev/bcm2079x u:object_r:nfc_device:s0
/dev/btlock u:object_r:bluetooth_device:s0
/dev/pn547 u:object_r:nfc_device:s0
/dev/rfkill u:object_r:wlan_device:s0
/dev/sec-nfc u:object_r:nfc_device:s0
# efs files
/efs/bluetooth(/.*)? u:object_r:bluetooth_efs_file:s0
/efs/wifi(/.*)? u:object_r:wifi_efs_file:s0
# executeables
/system/vendor/bin/macloader u:object_r:macloader_exec:s0
# firmware
/system/vendor/firmware/bcm(.*).hcd u:object_r:bt_fw_file:s0
/system/vendor/firmware/bcm2079x(.*).ncd u:object_r:nfc_fw_file:s0
/system/vendor/firmware/libpn547_fw.so u:object_r:nfc_fw_file:s0
# sockets
/data/cam_socket3 u:object_r:camera_socket:s0
# sysfs
/sys/devices/battery.[0-9]+/power_supply/battery(/.*)? u:object_r:sysfs_batteryinfo:s0
/sys/devices/platform/bcm[0-9]+_bluetooth/rfkill/rfkill0/state u:object_r:sysfs_bluetooth_writable:s0
msm8974-common: sepolicy: Resolve misc denials avc: denied { chown } for capability=0 scontext=u:r:thermal-engine:s0 tcontext=u:r:thermal-engine:s0 tclass=capability permissive=0 avc: denied { find } for interface=android.hardware.camera.provider::ICameraProvider pid=1315 scontext=u:r:mediaserver:s0 tcontext=u:object_r:hal_camera_hwservice:s0 tclass=hwservice_manager permissive=0 avc: denied { getattr } for pid=1940 comm="mount.ntfs" path="/dev/block/mmcblk0p23" dev="tmpfs" ino=6957 scontext=u:r:vold:s0 tcontext=u:object_r:system_block_device:s0 tclass=blk_file permissive=0 avc: denied { read write } for pid=1370 comm="mm-qcamera-daem" name="rear_corever" dev="sysfs" ino=24696 scontext=u:r:mm-qcamerad:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 avc: denied { search } for pid=561 comm="mm-qcamera-daem" name="camera" dev="sysfs" ino=24680 scontext=u:r:mm-qcamerad:s0 tcontext=u:object_r:sysfs_camera:s0 tclass=dir permissive=0 avc: denied { getattr } for pid=1950 comm="mount.ntfs" path="/dev/block/mmcblk0p24" dev="tmpfs" ino=8134 scontext=u:r:vold:s0 tcontext=u:object_r:cache_block_device:s0 tclass=blk_file permissive=0 avc: denied { getattr } for pid=1926 comm="fsck.ntfs" path="/dev/block" dev="tmpfs" ino=6956 scontext=u:r:fsck_untrusted:s0 tcontext=u:object_r:block_device:s0 tclass=dir permissive=0 avc: denied { getattr } for pid=1948 comm="mount.ntfs" path="/dev/block/mmcblk0p12" dev="tmpfs" ino=8090 scontext=u:r:vold:s0 tcontext=u:object_r:efs_block_device:s0 tclass=blk_file permissive=0 avc: denied { read } for pid=339 comm="mediaserver" name="rear_camfw_load" dev="sysfs" ino=24694 scontext=u:r:mediaserver:s0 tcontext=u:object_r:sysfs_camera:s0 tclass=file permissive=0 Change-Id: Ieb941d135d9f245f4a2bb9abb78e1b84bbef4b38
2018-03-26 14:37:07 +02:00
/sys/devices/virtual/camera(/.*)? u:object_r:sysfs_camera:s0
msm8974-common: sepolicy: Label sysfs_input, resolve denials * avc: denied { read write } for name="poll_delay" dev="sysfs" ino=27687 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_input:s0 tclass=file permissive=1 * avc: denied { open } for name="poll_delay" dev="sysfs" ino=27687 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_input:s0 tclass=file permissive=1 * avc: denied { search } for name="input" dev="sysfs" ino=13030 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_input:s0 tclass=dir permissive=0 * avc: denied { read } for name="input6" dev="sysfs" ino=26725 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_input:s0 tclass=dir permissive=0 * avc: denied { read } for name="device" dev="sysfs" ino=26717 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_input:s0 tclass=lnk_file permissive=0 * avc: denied { read write } for name="poll_delay" dev="sysfs" ino=26946 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_input:s0 tclass=file permissive=0 Change-Id: Id46a02a44e773b99ff61f9a8ff18394c74c80f90
2018-11-16 15:27:03 +01:00
/sys/devices/virtual/input(/.*)? u:object_r:sysfs_input:s0
msm8974-common: sepolicy: Import common sepolicy from klte-common * The bulk of the device family policy was common and applicable to all Samsung msm8974-devices. Move that common stuff here to ease maintenance. Change-Id: I86516adfb1b9c55a6959a7faf4ee424a4b3385c8
2018-02-03 23:04:39 +01:00
/sys/devices/virtual/sec/sec_key/hall_irq_ctrl u:object_r:sysfs_sec:s0
msm8974-common: sepolicy: Sort sysfs block of file_contexts sanely Change-Id: I421f1c97db0f5c2919d99293d75d3f6e09f52340
2018-11-17 17:56:22 +01:00
/sys/module/dhd/parameters/firmware_path u:object_r:sysfs_wifi_writeable:s0
/sys/module/dhd/parameters/nvram_path u:object_r:sysfs_wifi_writeable:s0
msm8974-common: Wire up mDNIe features Change-Id: Ib5d2825bb50c90b6743157bd624e7156c6d5ad01
2018-02-21 21:53:05 +01:00
msm8974-common: sepolicy: More sysfs_graphics, resolve denials * avc: denied { setattr } for name="brightness" dev="sysfs" ino=12913 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_graphics:s0 tclass=file permissive=1 * avc: denied { read } for name="window_type" dev="sysfs" ino=12710 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_graphics:s0 tclass=file permissive=1 * avc: denied { read } for name="window_type" dev="sysfs" ino=12710 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_graphics:s0 tclass=file permissive=0 * avc: denied { search } for name="panel" dev="sysfs" ino=12358 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_graphics:s0 tclass=dir permissive=0 Change-Id: I8597d7be6217816924a8fee854341e4f2fb18562
2018-10-21 16:21:25 +02:00
# sysfs - graphics/panel
/sys/class/mhl(/.*)? u:object_r:sysfs_graphics:s0
/sys/devices/mdp\.[0-9](/.*)? u:object_r:sysfs_graphics:s0
/sys/devices/virtual/graphics/fb0/csc_cfg u:object_r:sysfs_graphics:s0
/sys/devices/virtual/lcd/panel(/.*)? u:object_r:sysfs_graphics:s0
msm8974-common: sepolicy: Label sysfs_iio, resolve denials * avc: denied { read } for name="devices" dev="sysfs" ino=7783 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_iio:s0 tclass=dir permissive=0 * avc: denied { open } for name="devices" dev="sysfs" ino=7783 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_iio:s0 tclass=dir permissive=0 * avc: denied { write } for name="length" dev="sysfs" ino=26482 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_iio:s0 tclass=file permissive=0 * avc: denied { read } for name="iio:device1" dev="sysfs" ino=26489 scontext=u:r:hal_sensors_default:s0 tcontext=u:object_r:sysfs_iio:s0 tclass=lnk_file permissive=0 * avc: denied { read } for name="iio:device0" dev="sysfs" ino=26350 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_iio:s0 tclass=lnk_file permissive=1 * avc: denied { setattr } for name="length" dev="sysfs" ino=26343 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_iio:s0 tclass=file permissive=1 Change-Id: If9b3e9efe4f7c6eec3faf973e0b7aebd96d76ef3
2018-11-16 15:25:43 +01:00
# sysfs - iio
/sys/bus/iio/devices(/.*)? u:object_r:sysfs_iio:s0
/sys/devices/[a-f0-9]+\.spi/spi_master/spi[0-9]+/spi[0-9]+\.0/iio:device[0-9](/.*)? u:object_r:sysfs_iio:s0
msm8974-common: sepolicy: Update sysfs_mdnie, resolve denials * avc: denied { setattr } for name="scenario" dev="sysfs" ino=12753 scontext=u:r:init:s0 tcontext=u:object_r:sysfs_mdnie:s0 tclass=file permissive=0 * avc: denied { search } for name="mdnie" dev="sysfs" ino=12743i scontext=u:r:system_app:s0 tcontext=u:object_r:sysfs_mdnie:s0 tclass=dir permissive=0 Change-Id: I4a0530136d7d1e6ee8ede0733e70de813382372b
2018-11-25 23:28:31 +01:00
# sysfs - mdnie
/sys/devices/virtual/mdnie/mdnie(/.*)? u:object_r:sysfs_mdnie:s0
Reference in New Issue Copy Permalink