MiPad4/android_device_xiaomi_sdm660-common
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
android_device_xiaomi_sdm66.../sepolicy/vendor/hal_power_default.te

14 lines
718 B
Text
Raw Normal View History

sdm660-common: sepolicy: Rework sepolicy (No more neverallow) - Thanks to LineageOS and our sdm660 community Change-Id: I54c7d76260041b7c383428449e149aa35d51de9b3c
2021-04-17 13:30:26 -04:00
allow hal_power_default cgroup:file read;
sdm660-common: Add sepolicy rules for power-libperfmgr Signed-off-by: OdSazib <odsazib@gmail.com>
2020-11-04 06:20:06 -05:00
allow hal_power_default device_latency:chr_file rw_file_perms;
sdm660-common: Introduce kernelspace battery saver * Needs Kernel side support * This activates kernelspace battery saver via powerhal whenever battery saver is enabled in userspace, thereby lowering power consumption at kernel-level by disabling boosts and such Signed-off-by: clarencelol <clarencekuiek@icloud.com> Change-Id: I2623503db27d7518de519bcaa3f5af6ab83879d0
2021-07-25 01:25:15 -04:00
allow hal_power_default sysfs_battery_saver:dir r_dir_perms;
allow hal_power_default sysfs_battery_saver:file rw_file_perms;
sdm660-common: Add sepolicy rules for power-libperfmgr Signed-off-by: OdSazib <odsazib@gmail.com>
2020-11-04 06:20:06 -05:00
allow hal_power_default { sysfs_devfreq sysfs_kgsl }:dir search;
allow hal_power_default { sysfs_devfreq sysfs_kgsl }:{ file lnk_file } rw_file_perms;
allow hal_power_default sysfs_devices_system_cpu:file rw_file_perms;
sdm660-common: sepolicy: Rework sepolicy (No more neverallow) - Thanks to LineageOS and our sdm660 community Change-Id: I54c7d76260041b7c383428449e149aa35d51de9b3c
2021-04-17 13:30:26 -04:00
allow hal_power_default sysfs_touchpanel:dir search;
allow hal_power_default sysfs_touchpanel:file rw_file_perms;
sdm660-common: sepolicy: Address many sys_admin and kill denials sdm660-common: sepolicy: Address qti_init_shell kill denial avc: denied { kill } for comm="init.class_main" capability=5 scontext=u:r:qti_init_shell:s0 tcontext=u:r:qti_init_shell:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address hal_power_default kill and sys_admin denial avc: denied { sys_admin } for comm="android.hardwar" capability=21 scontext=u:r:hal_power_default:s0 tcontext=u:r:hal_power_default:s0 tclass=capability permissive=0 avc: denied { kill } for comm="android.hardwar" capability=5 scontext=u:r:hal_power_default:s0 tcontext=u:r:hal_power_default:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address vdc sys_admin denial avc: denied { sys_admin } for comm="vdc" capability=21 scontext=u:r:vdc:s0 tcontext=u:r:vdc:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address vold_prepare_subdirs sys_admin denial avc: denied { sys_admin } for comm="vold_prepare_su" capability=21 scontext=u:r:vold_prepare_subdirs:s0 tcontext=u:r:vold_prepare_subdirs:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address fsck sys_admin denial avc: denied { sys_admin } for comm="e2fsck" capability=21 scontext=u:r:fsck:s0 tcontext=u:r:fsck:s0 tclass=capability permissive=0 sdm660-common: sepolicy: address toolbox sys_admin, kill denial avc: denied { sys_admin } for comm="mkswap" capability=21 scontext=u:r:toolbox:s0 tcontext=u:r:toolbox:s0 tclass=capability permissive=0 avc: denied { kill } for comm="mkswap" capability=5 scontext=u:r:toolbox:s0 tcontext=u:r:toolbox:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address ueventd kill and sys_admin denials avc: denied { sys_admin } for pid=460 comm="ueventd" capability=21 scontext=u:r:ueventd:s0 tcontext=u:r:ueventd:s0 tclass=capability permissive=0 avc: denied { kill } for comm="ueventd" capability=5 scontext=u:r:ueventd:s0 tcontext=u:r:ueventd:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address irsc_util sys_admin denial avc: denied { sys_admin } for comm="irsc_util" capability=21 scontext=u:r:irsc_util:s0 tcontext=u:r:irsc_util:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address rfs_access sys_admin denial avc: denied { sys_admin } for comm="tftp_server" capability=21 scontext=u:r:rfs_access:s0 tcontext=u:r:rfs_access:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address rmt_storage sys_admin denial avc: denied { sys_admin } for comm="rmt_storage" capability=21 scontext=u:r:rmt_storage:s0 tcontext=u:r:rmt_storage:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address vendor_pd_mapper sys_admin denial sdm660-common: sepolicy: Address vendor_modprobe sys_admin denial avc: denied { sys_admin } for comm="modprobe" capability=21 scontext=u:r:vendor_modprobe:s0 tcontext=u:r:vendor_modprobe:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address adbd sys_admin denial avc: denied { sys_admin } for comm="adbd" capability=21 scontext=u:r:adbd:s0 tcontext=u:r:adbd:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address vendor_dpmd sys_admin denial avc: denied { sys_admin } for comm="dpmd" capability=21 scontext=u:r:vendor_dpmd:s0 tcontext=u:r:vendor_dpmd:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address thermal-engine sys_admin denial avc: denied { sys_admin } for comm="thermal-engine" capability=21 scontext=u:r:thermal-engine:s0 tcontext=u:r:thermal-engine:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address usbd sys_admin denial avc: denied { sys_admin } for comm="usbd" capability=21 scontext=u:r:usbd:s0 tcontext=u:r:usbd:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address vendor_msm_irqbalanced sys_admin denial avc: denied { sys_admin } for comm="msm_irqbalance" capability=21 scontext=u:r:vendor_msm_irqbalanced:s0 tcontext=u:r:vendor_msm_irqbalanced:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address hal_wifi_supplicant_default sys_admin denial avc: denied { sys_admin } for comm="wpa_supplicant" capability=21 scontext=u:r:hal_wifi_supplicant_default:s0 tcontext=u:r:hal_wifi_supplicant_default:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address boringssl_self_test sys_admin denial avc: denied { sys_admin } for pid=460 comm="boringssl_self_" capability=21 scontext=u:r:boringssl_self_test:s0 tcontext=u:r:boringssl_self_test:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address vendor_boringssl_self_test sys_admin denial avc: denied { sys_admin } for pid=462 comm="boringssl_self_" capability=21 scontext=u:r:vendor_boringssl_self_test:s0 tcontext=u:r:vendor_boringssl_self_test:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address linkerconfig sys_admin denial avc: denied { sys_admin } for pid=459 comm="linkerconfig" capability=21 scontext=u:r:linkerconfig:s0 tcontext=u:r:linkerconfig:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address fsverity_init sys_admin denial avc: denied { sys_admin } for comm="fsverity_init" capability=21 scontext=u:r:fsverity_init:s0 tcontext=u:r:fsverity_init:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address migrate_legacy_obb_data sys_admin denial avc: denied { sys_admin } for comm="migrate_legacy_" capability=21 scontext=u:r:migrate_legacy_obb_data:s0 tcontext=u:r:migrate_legacy_obb_data:s0 tclass=capability permissive=0 avc: denied { sys_admin } for comm="rm" capability=21 scontext=u:r:migrate_legacy_obb_data:s0 tcontext=u:r:migrate_legacy_obb_data:s0 tclass=capability permissive=0 avc: denied { sys_admin } for comm="mkdir" capability=21 scontext=u:r:migrate_legacy_obb_data:s0 tcontext=u:r:migrate_legacy_obb_data:s0 tclass=capability permissive=0 avc: denied { sys_admin } for comm="touch" capability=21 scontext=u:r:migrate_legacy_obb_data:s0 tcontext=u:r:migrate_legacy_obb_data:s0 tclass=capability permissive=0 avc: denied { sys_admin } for comm="rm" capability=21 scontext=u:r:migrate_legacy_obb_data:s0 tcontext=u:r:migrate_legacy_obb_data:s0 tclass=capability permissive=0 avc: denied { sys_admin } for comm="rmdir" capability=21 scontext=u:r:migrate_legacy_obb_data:s0 tcontext=u:r:migrate_legacy_obb_data:s0 tclass=capability permissive=0 avc: denied { sys_admin } for comm="log" capability=21 scontext=u:r:migrate_legacy_obb_data:s0 tcontext=u:r:migrate_legacy_obb_data:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address hvdcp sys_admin denial avc: denied { sys_admin } for comm="hvdcp_opti" capability=21 scontext=u:r:hvdcp:s0 tcontext=u:r:hvdcp:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address netmgrd sys_admin denial avc: denied { sys_admin } for comm="netmgrd" capability=21 scontext=u:r:netmgrd:s0 tcontext=u:r:netmgrd:s0 tclass=capability permissive=0 sdm660-common: sepolicy: Address adbroot sys_admin denial avc: denied { sys_admin } for comm="adb_root" capability=21 scontext=u:r:adbroot:s0 tcontext=u:r:adbroot:s0 tclass=capability permissive=0 Signed-off-by: pix106 <sbordenave@gmail.com>
2021-07-30 07:46:54 -04:00
allow hal_power_default self:capability { kill sys_admin };
sdm660-common: Kang more pixel power HAL sepolicy * Kanged from mata (with all available nodes on msm4.4)
2021-02-16 14:29:33 -05:00
r_dir_file(hal_power_default, sysfs_graphics)
sdm660-common: Add sepolicy rules for power-libperfmgr Signed-off-by: OdSazib <odsazib@gmail.com>
2020-11-04 06:20:06 -05:00
set_prop(hal_power_default, vendor_power_prop)
Reference in a new issue Copy permalink