kunlun2: nuke sepolicy again
This commit is contained in:
parent
a2e46decf4
commit
d4b68133ed
8 changed files with 0 additions and 30 deletions
|
@ -1,2 +0,0 @@
|
|||
# Allow appdomain to get vendor_camera_prop
|
||||
get_prop(appdomain, vendor_camera_prop)
|
|
@ -2,4 +2,3 @@ type adsprpcd_file, file_type;
|
|||
type bt_firmware_file, file_type;
|
||||
type firmware_file, file_type;
|
||||
type persist_file, file_type;
|
||||
type sysfs_tp, fs_type, sysfs_type;
|
||||
|
|
|
@ -1,22 +1,5 @@
|
|||
# DT2W
|
||||
/sys/class/touch/tp_dev/gesture_on u:object_r:sysfs_tp:s0
|
||||
|
||||
# Files in rootfs
|
||||
/bt_firmware(/.*)? u:object_r:bt_firmware_file:s0
|
||||
/dsp(/.*)? u:object_r:adsprpcd_file:s0
|
||||
/firmware(/.*)? u:object_r:firmware_file:s0
|
||||
/persist(/.*)? u:object_r:persist_file:s0
|
||||
|
||||
# HALs
|
||||
/system/bin/hw/android\.hardware\.power@1\.2-service-qti u:object_r:hal_power_default_exec:s0
|
||||
/(product|system/product)/vendor_overlay/[0-9]+/bin/hw/android\.hardware\.light@2\.0-service u:object_r:hal_light_default_exec:s0
|
||||
/(product|system/product)/vendor_overlay/[0-9]+/bin/hw/android\.hardware\.usb@1\.0-service u:object_r:hal_usb_default_exec:s0
|
||||
|
||||
# Vendor overlay
|
||||
/(product|system/product)/vendor_overlay/[0-9]+/etc(/.*)? u:object_r:vendor_configs_file:s0
|
||||
/(product|system/product)/vendor_overlay/[0-9]+/etc/perf(/.*)? u:object_r:vendor_configs_file:s0
|
||||
/(product|system/product)/vendor_overlay/[0-9]+/etc/wifi(/.*)? u:object_r:vendor_configs_file:s0
|
||||
/(product|system/product)/vendor_overlay/[0-9]+/etc/vintf(/.*)? u:object_r:vendor_configs_file:s0
|
||||
/(product|system/product)/vendor_overlay/[0-9]+/lib(64)?/hw u:object_r:vendor_hal_file:s0
|
||||
/(product|system/product)/vendor_overlay/[0-9]+/lib(64)?/soundfx u:object_r:vendor_hal_file:s0
|
||||
/(product|system/product)/vendor_overlay/[0-9]+/overlay(/.*)? u:object_r:vendor_overlay_file:s0
|
||||
|
|
|
@ -1,2 +0,0 @@
|
|||
allow hal_power sysfs_tp:dir search;
|
||||
allow hal_power sysfs_tp:file w_file_perms;
|
|
@ -1,2 +0,0 @@
|
|||
# Allow init to mount vendor configs
|
||||
allow init vendor_configs_file:dir mounton;
|
|
@ -1 +0,0 @@
|
|||
type vendor_camera_prop, property_type;
|
|
@ -1,4 +0,0 @@
|
|||
type qti_init_shell, domain;
|
||||
|
||||
allow qti_init_shell sysfs_io_sched_tuneable:file w_file_perms;
|
||||
dontaudit qti_init_shell self:capability { dac_override dac_read_search };
|
|
@ -1 +0,0 @@
|
|||
get_prop(system_server, vendor_camera_prop)
|
Loading…
Reference in a new issue