AetherDroid/android_device_samsung_universal7570-common
1
0
Fork 0
mirror of https://github.com/AetherDroid/android_device_samsung_universal7570-common.git synced 2025-09-05 16:07:47 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

universal7870: import Pie sepolicies

Browse source
This commit is contained in:
Astrako 2020-01-28 00:06:11 +01:00 • committed by Alejandro
parent 734b50ffaa
commit 221b221b8a
41 changed files with 583 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

51
sepolicy/system_server.te Normal file
View file

@ -0,0 +1,51 @@
# /dev/mbin0
allow system_server emmcblk_device:dir search;
# /efs
allow system_server efs_file:dir r_dir_perms;
# /efs/FactoryApp/gyro_cal_data
allow system_server sensor_efs_file:file r_file_perms;
# /data/system/gps/.gps.interface.pipe.*
type_transition system_server system_data_file:fifo_file gps_data_file ".flp.interface.pipe.to_gpsd";
type_transition system_server system_data_file:fifo_file gps_data_file ".gps.interface.pipe.to_gpsd";
type_transition system_server system_data_file:fifo_file gps_data_file ".gps.interface.pipe.to_jni";
allow system_server gps_data_file:fifo_file create_file_perms;
allow system_server gps_data_file:dir rw_dir_perms;
# /data/system/gps/chip.info
allow system_server gps_data_file:file create_file_perms;
# /efs/prox_cal
allow system_server efs_file:file r_file_perms;
# /efs/FactoryApp
allow system_server app_efs_file:dir r_dir_perms;
allow system_server app_efs_file:file r_file_perms;
# WifiMachine
allow system_server self:capability { sys_module };
allow system_server wifi_efs_file:dir r_dir_perms;
allow system_server wifi_efs_file:file r_file_perms;
# mDNIE
allow system_server sysfs_mdnie_writable:lnk_file rw_file_perms;
allow system_server sysfs_mdnie_writable:dir r_dir_perms;
allow system_server sysfs_mdnie_writable:file rw_file_perms;
# memtrack HAL
allow system_server debugfs:dir r_dir_perms;
allow system_server debugfs:file r_file_perms;
# /data/system/gps/xtraee.bin
allow system_server gps_data_file:file create_file_perms;
allow system_server emmcblk_device:blk_file { getattr ioctl open read write };
allow system_server gps_data_file:dir { add_name remove_name write search };
allow system_server gps_data_file:file { create setattr unlink write };
allow system_server gpsd:unix_stream_socket connectto;
allow system_server sysfs_sec:dir search;
allow system_server sysfs_sec:lnk_file read;
allow system_server crash_dump:process getpgid;
allow system_server unlabeled:dir write;