universal7570: import sepolicy from 7870

The sepolicy before seems to be broken

Change-Id: I890a28429f03e47a183a0a0b755987f3495994c3
This commit is contained in:
Hendra Manudinata 2021-03-13 05:07:20 +07:00
parent f22a0e7cdd
commit f0e4521a9f
No known key found for this signature in database
GPG key ID: 8DB7A83A9B4EE2D6
53 changed files with 1095 additions and 58 deletions

36
sepolicy/gpsd.te Normal file
View file

@ -0,0 +1,36 @@
type gpsd, domain, netdomain;
type gpsd_exec, exec_type, vendor_file_type, file_type;
# gpsd is started by init, type transit from init domain to gpsd domain
init_daemon_domain(gpsd)
allow gpsd rild:unix_stream_socket connectto;
get_prop(gpsd, exported_radio_prop)
get_prop(gpsd, exported_config_prop)
get_prop(gpsd, hwservicemanager_prop)
hwbinder_use(gpsd)
allow gpsd system_suspend_hwservice:hwservice_manager { find };
allow gpsd fwk_sensor_hwservice:hwservice_manager { find };
binder_call(gpsd, system_suspend_server)
binder_call(gpsd, system_server)
binder_call(system_server, gpsd)
allow gpsd self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;
allow gpsd self:{ tcp_socket udp_socket } create_stream_socket_perms;
allow gpsd port:tcp_socket { name_bind name_connect };
allow gpsd port:udp_socket name_bind;
allow gpsd node:{ tcp_socket udp_socket } node_bind;
# /acct/tasks
allow gpsd cgroup:file getattr;
# /dev/socket/fwmarkd
allow gpsd fwmarkd_socket:sock_file write;
# /data/vendor/gps
allow gpsd gps_vendor_data_file:dir rw_dir_perms;
allow gpsd gps_vendor_data_file:file create_file_perms;
allow gpsd gps_vendor_data_file:fifo_file create_file_perms;