kunlun2: nuke sepolicy again

This commit is contained in:
GiaSen 2020-04-25 19:49:22 +02:00
parent a2e46decf4
commit d4b68133ed
8 changed files with 0 additions and 30 deletions

View file

@ -1,2 +0,0 @@
# Allow appdomain to get vendor_camera_prop
get_prop(appdomain, vendor_camera_prop)

View file

@ -2,4 +2,3 @@ type adsprpcd_file, file_type;
type bt_firmware_file, file_type;
type firmware_file, file_type;
type persist_file, file_type;
type sysfs_tp, fs_type, sysfs_type;

View file

@ -1,22 +1,5 @@
# DT2W
/sys/class/touch/tp_dev/gesture_on u:object_r:sysfs_tp:s0
# Files in rootfs
/bt_firmware(/.*)? u:object_r:bt_firmware_file:s0
/dsp(/.*)? u:object_r:adsprpcd_file:s0
/firmware(/.*)? u:object_r:firmware_file:s0
/persist(/.*)? u:object_r:persist_file:s0
# HALs
/system/bin/hw/android\.hardware\.power@1\.2-service-qti u:object_r:hal_power_default_exec:s0
/(product|system/product)/vendor_overlay/[0-9]+/bin/hw/android\.hardware\.light@2\.0-service u:object_r:hal_light_default_exec:s0
/(product|system/product)/vendor_overlay/[0-9]+/bin/hw/android\.hardware\.usb@1\.0-service u:object_r:hal_usb_default_exec:s0
# Vendor overlay
/(product|system/product)/vendor_overlay/[0-9]+/etc(/.*)? u:object_r:vendor_configs_file:s0
/(product|system/product)/vendor_overlay/[0-9]+/etc/perf(/.*)? u:object_r:vendor_configs_file:s0
/(product|system/product)/vendor_overlay/[0-9]+/etc/wifi(/.*)? u:object_r:vendor_configs_file:s0
/(product|system/product)/vendor_overlay/[0-9]+/etc/vintf(/.*)? u:object_r:vendor_configs_file:s0
/(product|system/product)/vendor_overlay/[0-9]+/lib(64)?/hw u:object_r:vendor_hal_file:s0
/(product|system/product)/vendor_overlay/[0-9]+/lib(64)?/soundfx u:object_r:vendor_hal_file:s0
/(product|system/product)/vendor_overlay/[0-9]+/overlay(/.*)? u:object_r:vendor_overlay_file:s0

View file

@ -1,2 +0,0 @@
allow hal_power sysfs_tp:dir search;
allow hal_power sysfs_tp:file w_file_perms;

View file

@ -1,2 +0,0 @@
# Allow init to mount vendor configs
allow init vendor_configs_file:dir mounton;

View file

@ -1 +0,0 @@
type vendor_camera_prop, property_type;

View file

@ -1,4 +0,0 @@
type qti_init_shell, domain;
allow qti_init_shell sysfs_io_sched_tuneable:file w_file_perms;
dontaudit qti_init_shell self:capability { dac_override dac_read_search };

View file

@ -1 +0,0 @@
get_prop(system_server, vendor_camera_prop)