universal7870: import sepolicy from 7580-common

thanks to @danwood76
This commit is contained in:
Alejandro 2020-05-31 21:04:02 +02:00
parent 9ce97a0bfb
commit 0cfeb0ec4f
61 changed files with 507 additions and 425 deletions

View file

@ -1,6 +1,6 @@
# modem daemon sec label
type cpboot-daemon, domain, coredomain;
type cpboot-daemon_exec, exec_type, file_type, system_file_type;
type cpboot-daemon, domain;
type cpboot-daemon_exec, exec_type, file_type, vendor_file_type;
net_domain(cpboot-daemon)
init_daemon_domain(cpboot-daemon)
@ -24,6 +24,8 @@ allow cpboot-daemon kmsg_device:chr_file rw_file_perms;
allow cpboot-daemon mif_device:chr_file rw_file_perms;
# /dev/mbin0
allow cpboot-daemon emmcblk_device:blk_file r_file_perms;
# /dev/spi_boot_link
allow cpboot-daemon radio_device:chr_file rw_file_perms;
# /dev/block/mmcblk0p13
allow cpboot-daemon block_device:dir r_dir_perms;
allow cpboot-daemon radio_block_device:blk_file r_file_perms;
@ -36,12 +38,12 @@ allow cpboot-daemon efs_file:dir r_dir_perms;
# /efs/nv_data.bin
allow cpboot-daemon bin_nv_data_efs_file:file rw_file_perms;
allow cpboot-daemon efs_file:file rw_file_perms;
# /sys/bus/usb/devices/1-2/idVendor
allow cpboot-daemon sysfs:file r_file_perms;
# /proc/cmdline
# /proc permissions
allow cpboot-daemon proc_cmdline:file r_file_perms;
allow cpboot-daemon proc_dt_firmware:dir search;
allow cpboot-daemon proc_dt_firmware:file { open read };
# set properties on boot
set_prop(cpboot-daemon, cpboot-daemon_prop)