android_device_xiaomi_sdm66.../sepolicy/vendor/file_contexts

110 lines
9.1 KiB
Text
Raw Normal View History

# Amplifier
/(vendor|system/vendor)/bin/tinymix u:object_r:vendor_tinyalsa_exec:s0
# Biometric
/(vendor|system/vendor)/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.1-service\.xiaomi_sdm660 u:object_r:hal_fingerprint_sdm660_exec:s0
/(vendor|system/vendor)/bin/init\.goodix\.sh u:object_r:hal_fingerprint_sdm660_exec:s0
# Camera
/data/misc/camera u:object_r:camera_data_file:s0
# blkio
/dev/blkio(/.*)? u:object_r:blkio_dev:s0
/dev/blkio/background(/.*)? u:object_r:blkio_dev:s0
sdm660-common: sepolicy: Label /dev/stune(/.*) as cgroup * avc: denied { write } for comm="adb_root" name="tasks" dev="tmpfs" ino=5693 scontext=u:r:adbroot:s0 tcontext=u:object_r:device:s0 tclass=file permissive=0 * avc: denied { open } for comm="adb_root" name="tasks" dev="tmpfs" ino=5693 scontext=u:r:adbroot:s0 tcontext=u:object_r:device:s0 tclass=file permissive=0 * avc: denied { write } for comm="installd" name="tasks" dev="tmpfs" ino=5693 scontext=u:r:installd:s0 tcontext=u:object_r:device:s0 tclass=file permissive=0 * avc: denied { open } for comm="installd" name="tasks" dev="tmpfs" ino=5693 scontext=u:r:installd:s0 tcontext=u:object_r:device:s0 tclass=file permissive=0 * avc: denied { write } for comm="netd" name="tasks" dev="tmpfs" ino=5693 scontext=u:r:netd:s0 tcontext=u:object_r:device:s0 tclass=file permissive=0 * avc: denied { open } for comm="netd" name="tasks" dev="tmpfs" ino=5693 scontext=u:r:netd:s0 tcontext=u:object_r:device:s0 tclass=file permissive=0 * avc: denied { write } for comm="storaged" name="tasks" dev="tmpfs" ino=5693 scontext=u:r:storaged:s0 tcontext=u:object_r:device:s0 tclass=file permissive=0 * avc: denied { open } for comm="storaged" name="tasks" dev="tmpfs" ino=5693 scontext=u:r:storaged:s0 tcontext=u:object_r:device:s0 tclass=file permissive=0 * avc: denied { write } for comm="apexd" name="tasks" dev="tmpfs" ino=5693 scontext=u:r:apexd:s0 tcontext=u:object_r:device:s0 tclass=file permissive=0 Change-Id: Idc69978328640ff40ad5efe2f0abd79304e75893 Signed-off-by: clarencelol <clarencekuiek@icloud.com> Signed-off-by: pix106 <sbordenave@gmail.com>
2022-09-23 07:58:07 -04:00
# Device nodes
/dev/stune(/.*)? u:object_r:cgroup:s0
# Executables
/vendor/bin/sh u:object_r:vendor_shell_exec:s0
# Fingerprint
/data/gf_data(/.*)? u:object_r:fingerprintd_data_file:s0
/data/vendor/fpc(/.*)? u:object_r:fingerprint_vendor_data_file:s0
/data/vendor/gf_data(/.*)? u:object_r:fingerprint_vendor_data_file:s0
/data/vendor/goodix(/.*)? u:object_r:fingerprint_vendor_data_file:s0
/dev/goodix_fp u:object_r:fingerprint_device:s0
/data/system/users/[0-9]/settings_fingerprint\.xml u:object_r:fingerprintd_data_file:s0
# Firmware
/firmware(/.*)? u:object_r:firmware_file:s0
/bt_firmware(/.*)? u:object_r:bt_firmware_file:s0
/persist(/.*)? u:object_r:persist_file:s0
# Hall Switch
/sys/module/hall/parameters(/.*)? u:object_r:hall_dev:s0
# Haptics control
/sys/module/qti_haptics/parameters/vmax_mv_override u:object_r:sysfs_vibrator:s0
# Hexagon DSP-side executable needed for Halide operation
# This is labeled as public_adsprpcd_file as it needs to be read by apps
# (e.g. Google Camera App)
/mnt/vendor/dsp/fastrpc_shell_3 u:object_r:public_adsprpcd_file:s0
# HW Info
/sys/devices/platform/HardwareInfo(/.*)? u:object_r:sysfs_info:s0
/sys/devices/platform/HardwareInfo/gsensor u:object_r:sysfs_info:s0
# IR
/dev/lirc0 u:object_r:spidev_device:s0
/dev/spidev7.1 u:object_r:spidev_device:s0
# Kcal
/sys/devices/platform/kcal_ctrl.0(/.*)? u:object_r:kcal_dev:s0
/sys/bus/platform/drivers/kcal_ctrl(/.*)? u:object_r:kcal_dev:s0
# IR HAL
/(vendor|system/vendor)/bin/hw/android\.hardware\.ir@1\.0-service\.xiaomi_sdm660 u:object_r:hal_ir_default_exec:s0
# Lights
/vendor/bin/hw/android\.hardware\.light-service\.xiaomi u:object_r:hal_light_default_exec:s0
# Notification LED
/sys/devices/platform/soc/800f000.qcom,spmi/spmi-0/spmi0-03/800f000.qcom,spmi:qcom,pm660l@3:qcom,leds@d000/leds/blue(/.*)? u:object_r:sysfs_graphics:s0
/sys/devices/platform/soc/800f000.qcom,spmi/spmi-0/spmi0-03/800f000.qcom,spmi:qcom,pm660l@3:qcom,leds@d000/leds/green(/.*)? u:object_r:sysfs_graphics:s0
/sys/devices/platform/soc/800f000.qcom,spmi/spmi-0/spmi0-03/800f000.qcom,spmi:qcom,pm660l@3:qcom,leds@d000/leds/red(/.*)? u:object_r:sysfs_graphics:s0
/sys/devices/platform/soc/800f000.qcom,spmi/spmi-0/spmi0-03/800f000.qcom,spmi:qcom,pm660l@3:qcom,leds@d000/leds/white(/.*)? u:object_r:sysfs_graphics:s0
/sys/devices/platform/soc/800f000.qcom,spmi/spmi-0/spmi0-03/800f000.qcom,spmi:qcom,pm660l@3:qcom,leds@d300/leds/flashlight(/.*)? u:object_r:sysfs_graphics:s0
# Power
sdm660-common: Migrate to Xiaomi power AIDL HAL Change-Id: I42170d51a517170b58d532addd9c38496e43457c jasmine_sprout: Remove QTI perfd Bug: 69270928 Test: Build and boot device and test camera Change-Id: I87b283206f462fb5c8ec9cdd303ae2934fe9bfc4 jasmine_sprout: Declare BOARD_VENDOR * Needed for xiaomi-perfmgr power AIDL guards Change-Id: Idbb48e0f9b01090a456ad5d3f2d51f4dfab55672 jasmine_sprout: Create dummy libqti-perfd-client * proprietary perfd blobs can finally be nuked without breaking goodix * we could even map the functions to use libperfmgr powerhints in the future [SebaUbuntu]: Cleanup Android.bp and add copyright header Change-Id: I124652f3041761966a3e3bd97c757fecc39cc5fb jasmine_sprout: libqti-perfd-client: Remove namespace declaration It's pointless when using extern "C". Change-Id: Ibdf9f06a70aa3a75687b33781c78cf2172bb334d jasmine_sprout: libqti-perfd-client: return a dummy value Return a positive integer for perf lock acquire and release so that Goodix/FPC fingerprint sensor blobs will not complain. Goodix: E [goodixHAL][gf_hal_milan_f_series]: goodix_perf_lock_acquire: Failed to acquire perf lock, err: 0 E [goodixHAL][gf_hal_milan_f_series]: goodix_perf_lock_release: Perf lock release error 0 FPC: E fpc_tac : fpc_perf_lock_acquire: Incorrect params, Failed to acquire perf lock, err E fpc_tac : fpc_perf_lock_release: Perf lock release error 0 Signed-off-by: Chenyang Zhong <zhongcy95@gmail.com> Change-Id: I861672e9a738c2204755d802670f4b28b662f286 jasmine_sprout: libqti-perfd-client: Move to C * Why bothering with C++ mangling when we can just build it as a standard C library? Change-Id: I45ea977edf7ea7fab6fece76f3049654a8d24c5d jasmine_sprout: Add powerhint.json jasmine Change-Id: If270fc906fd833bb6b0d3b00621c0b079346e47d jasmine_sprout: rootdir: Initial libperfmgr init config * From coral, heavily stripped down Change-Id: Ib6846e4f4f23baf56910d2330e26846b99830218 jasmine_sprout: sepolicy: Initial libperfmgr sepolicy Change-Id: I3d0a259bc89b4ecd0bf1632199172710d98230e0 jasmine_sprout: Don't explicitly build older minor version HIDL libs Change-Id: Ib0caa49054a79b1f01ffc751826286a29c642e06 jasmine_sprout: Remove QTI perf reminants jasmine_sprout: Add back ro.vendor.extension_library definition * We aren't using QCOM's perfd but our blobs still check for this. * To avoid unnecessary errors, let's just add it back. Change-Id: Icc44b330f21a658cfa8ded691a6628d8f62c3649 Signed-off-by: pix106 <sbordenave@gmail.com>
2022-11-20 08:48:06 -05:00
/vendor/bin/hw/android\.hardware\.power-service\.xiaomi-libperfmgr u:object_r:hal_power_default_exec:s0
# Root files
/proc/sys/fs/protected_regular u:object_r:proc:s0
# Service HALs
/(vendor|system/vendor)/bin/hw/android\.hardware\.authsecret@1\.0-service u:object_r:hal_authsecret_default_exec:s0
# Sockets
/dev/socket/audio_hw_socket u:object_r:audio_socket:s0
# Tap to Wake
/sys/devices/platform/soc/c177000.i2c/i2c-3/3-005d/enable_dt2w u:object_r:sysfs_touchpanel:s0
/sys/devices/platform/soc/c177000.i2c/i2c-3/3-0038/enable_dt2w u:object_r:sysfs_touchpanel:s0
/proc/touchscreen/enable_dt2w u:object_r:sysfs_touchpanel:s0
# Thermal
/data/vendor/thermal(/.*)? u:object_r:thermal_data_file:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.thermal@2\.0-service\.mock u:object_r:hal_thermal_default_exec:s0
# USB
/(vendor|system/vendor)/bin/hw/android\.hardware\.usb@1\.0-service\.xiaomi_sdm660 u:object_r:hal_usb_default_exec:s0
# Video4linux sysfs nodes
/sys/devices/platform/soc/caa0000\.qcom,jpeg/video4linux/video1(/.*)? u:object_r:sysfs_graphics:s0
sdm660-common: sepolicy: Label sysfs wakeup nodes avc: denied { read } for comm="Binder:514_1" name="event_count" dev="sysfs" ino=53144 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 avc: denied { read } for comm="Binder:514_1" name="max_time_ms" dev="sysfs" ino=53149 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 avc: denied { read } for comm="Binder:514_1" name="wakeup_count" dev="sysfs" ino=53145 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 avc: denied { read } for comm="Binder:514_1" name="total_time_ms" dev="sysfs" ino=53148 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 avc: denied { read } for comm="Binder:514_1" name="expire_count" dev="sysfs" ino=53146 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 avc: denied { read } for comm="Binder:514_1" name="active_count" dev="sysfs" ino=53143 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 avc: denied { read } for comm="Binder:514_1" name="last_change_ms" dev="sysfs" ino=53150 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 avc: denied { read } for comm="Binder:514_1" name="prevent_suspend_time_ms" dev="sysfs" ino=53151 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 avc: denied { read } for comm="Binder:514_1" name="name" dev="sysfs" ino=53142 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 avc: denied { read } for comm="Binder:514_1" name="active_time_ms" dev="sysfs" ino=53147 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 Signed-off-by: pix106 <sbordenave@gmail.com>
2021-07-31 02:52:10 -04:00
# Wakeup
/sys/devices/platform/soc/800f000\.qcom,spmi/spmi-0/spmi0-00/800f000\.qcom,spmi:qcom,pm660@0:qcom,qpnp-smb2/power_supply/main/(?!.*wakeup\d+).* u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/800f000\.qcom,spmi/spmi-0/spmi0-00/800f000\.qcom,spmi:qcom,pm660@0:qcom,pm660_rtc/rtc/rtc0/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/800f000\.qcom,spmi/spmi-0/spmi0-00/800f000\.qcom,spmi:qcom,pm660@0:qpnp,fg/power_supply/bms/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/800f000\.qcom,spmi/spmi-0/spmi0-00/800f000\.qcom,spmi:qcom,pm660@0:qcom,qpnp-smb2/power_supply/battery/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/800f000\.qcom,spmi/spmi-0/spmi0-00/800f000\.qcom,spmi:qcom,pm660@0:qcom,qpnp-smb2/power_supply/dc/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/800f000\.qcom,spmi/spmi-0/spmi0-00/800f000\.qcom,spmi:qcom,pm660@0:qcom,qpnp-smb2/power_supply/main/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/800f000\.qcom,spmi/spmi-0/spmi0-00/800f000\.qcom,spmi:qcom,pm660@0:qcom,qpnp-smb2/power_supply/pc_port/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/800f000\.qcom,spmi/spmi-0/spmi0-00/800f000\.qcom,spmi:qcom,pm660@0:qcom,qpnp-smb2/power_supply/usb/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/c176000\.i2c/i2c-2/2-001d/power_supply/parallel/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/ca0c000\.qcom,cci/ca0c000\.qcom,cci:qcom,camera@0/video4linux/video[0-9]/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/ca0c000\.qcom,cci/ca0c000\.qcom,cci:qcom,camera@1/video4linux/video[0-9]/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/ca0c000\.qcom,cci/ca0c000\.qcom,cci:qcom,camera@2/video4linux/video[0-9]/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0