MiPad4/android_device_xiaomi_sdm660-common
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
android_device_xiaomi_sdm66.../sepolicy/vendor/file_contexts

101 lines
8.6 KiB
Text
Raw Normal View History

sdm660-common: sepolicy: Update sepolicy and cleanup * Address some denials from android 11 * Fix video recording * Sort in alphabetic order Signed-off-by: OdSazib <odsazib@gmail.com>
2020-08-06 04:08:04 -04:00
# Amplifier
sdm66-common: sepolicy: Fix labeling sysfs nodes for K4.19 - Address more denials and label some new nodes Signed-off-by: OdSazib <odsazib@gmail.com>
2021-07-16 04:41:24 -04:00
/(vendor|system/vendor)/bin/tinymix u:object_r:vendor_tinyalsa_exec:s0
sdm660-common: sepolicy: Update sepolicy and cleanup * Address some denials from android 11 * Fix video recording * Sort in alphabetic order Signed-off-by: OdSazib <odsazib@gmail.com>
2020-08-06 04:08:04 -04:00
wayne: sepolicy: Initial denials Signed-off-by: Isaac Chen <isaacchen@isaacchen.cn>
2018-07-27 08:27:16 -04:00
# Biometric
sdm66-common: sepolicy: Fix labeling sysfs nodes for K4.19 - Address more denials and label some new nodes Signed-off-by: OdSazib <odsazib@gmail.com>
2021-07-16 04:41:24 -04:00
/(vendor|system/vendor)/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.1-service\.xiaomi_sdm660 u:object_r:hal_fingerprint_sdm660_exec:s0
wayne: sepolicy: Initial denials Signed-off-by: Isaac Chen <isaacchen@isaacchen.cn>
2018-07-27 08:27:16 -04:00
sdm66-common: sepolicy: Fix labeling sysfs nodes for K4.19 - Address more denials and label some new nodes Signed-off-by: OdSazib <odsazib@gmail.com>
2021-07-16 04:41:24 -04:00
# Camera
/data/misc/camera u:object_r:camera_data_file:s0
sdm660-common: sepolicy: Rework sepolicy (No more neverallow) - Thanks to LineageOS and our sdm660 community Change-Id: I54c7d76260041b7c383428449e149aa35d51de9b3c
2021-04-17 13:30:26 -04:00
sdm660-common: sepolicy: Adress few denials Change-Id: I45c7af8087a8495e4e7902d74f7811c2d40f5197
2020-04-15 11:51:04 -04:00
# blkio
sdm66-common: sepolicy: Fix labeling sysfs nodes for K4.19 - Address more denials and label some new nodes Signed-off-by: OdSazib <odsazib@gmail.com>
2021-07-16 04:41:24 -04:00
/dev/blkio(/.*)? u:object_r:blkio_dev:s0
/dev/blkio/background(/.*)? u:object_r:blkio_dev:s0
sdm660-common: sepolicy: Adress few denials Change-Id: I45c7af8087a8495e4e7902d74f7811c2d40f5197
2020-04-15 11:51:04 -04:00
sdm660-common: Update RIL from AOSPA - update radio from LA.UM.9.12.r1-10800-SMxx50.0 - update telephony from qcom-common-AOSPA Signed-off-by: OdSazib <odsazib@gmail.com>
2021-07-13 02:38:43 -04:00
# CNE
sdm66-common: sepolicy: Fix labeling sysfs nodes for K4.19 - Address more denials and label some new nodes Signed-off-by: OdSazib <odsazib@gmail.com>
2021-07-16 04:41:24 -04:00
/(vendor|system/vendor)/bin/mutualex u:object_r:vendor_mutualex_exec:s0
wayne: sepolicy: Initial denials Signed-off-by: Isaac Chen <isaacchen@isaacchen.cn>
2018-07-27 08:27:16 -04:00
sdm660-common: sepolicy: Rework sepolicy (No more neverallow) - Thanks to LineageOS and our sdm660 community Change-Id: I54c7d76260041b7c383428449e149aa35d51de9b3c
2021-04-17 13:30:26 -04:00
# Executables
sdm66-common: sepolicy: Fix labeling sysfs nodes for K4.19 - Address more denials and label some new nodes Signed-off-by: OdSazib <odsazib@gmail.com>
2021-07-16 04:41:24 -04:00
/vendor/bin/sh u:object_r:vendor_shell_exec:s0
sdm660-common: sepolicy: Rework sepolicy (No more neverallow) - Thanks to LineageOS and our sdm660 community Change-Id: I54c7d76260041b7c383428449e149aa35d51de9b3c
2021-04-17 13:30:26 -04:00
# Fingerprint
sdm66-common: sepolicy: Fix labeling sysfs nodes for K4.19 - Address more denials and label some new nodes Signed-off-by: OdSazib <odsazib@gmail.com>
2021-07-16 04:41:24 -04:00
/data/gf_data(/.*)? u:object_r:fingerprintd_data_file:s0
/data/vendor/fpc(/.*)? u:object_r:fingerprint_vendor_data_file:s0
/data/vendor/gf_data(/.*)? u:object_r:fingerprint_vendor_data_file:s0
/data/vendor/goodix(/.*)? u:object_r:fingerprint_vendor_data_file:s0
/dev/goodix_fp u:object_r:fingerprint_device:s0
sdm660-common: sepolicy: add firmware labels * Q sepolicy doesn't have labels for these root folders anymore Change-Id: Ibc1f13968eb4de0868de149f1347ca07da1c581c
2019-09-08 08:03:26 -04:00
sdm660-common: sepolicy: Rework sepolicy (No more neverallow) - Thanks to LineageOS and our sdm660 community Change-Id: I54c7d76260041b7c383428449e149aa35d51de9b3c
2021-04-17 13:30:26 -04:00
# Firmware
sdm66-common: sepolicy: Fix labeling sysfs nodes for K4.19 - Address more denials and label some new nodes Signed-off-by: OdSazib <odsazib@gmail.com>
2021-07-16 04:41:24 -04:00
/firmware(/.*)? u:object_r:firmware_file:s0
/bt_firmware(/.*)? u:object_r:bt_firmware_file:s0
/persist(/.*)? u:object_r:persist_file:s0
wayne: sepolicy: Initial denials Signed-off-by: Isaac Chen <isaacchen@isaacchen.cn>
2018-07-27 08:27:16 -04:00
sdm660-common: sepolicy: Rework sepolicy (No more neverallow) - Thanks to LineageOS and our sdm660 community Change-Id: I54c7d76260041b7c383428449e149aa35d51de9b3c
2021-04-17 13:30:26 -04:00
# Hexagon DSP-side executable needed for Halide operation
# This is labeled as public_adsprpcd_file as it needs to be read by apps
# (e.g. Google Camera App)
sdm66-common: sepolicy: Fix labeling sysfs nodes for K4.19 - Address more denials and label some new nodes Signed-off-by: OdSazib <odsazib@gmail.com>
2021-07-16 04:41:24 -04:00
/mnt/vendor/dsp/fastrpc_shell_3 u:object_r:public_adsprpcd_file:s0
sdm660: Add Hardware Info permssions and sepolicy rules
2019-08-13 12:38:26 -04:00
sdm660-common: sepolicy: Add Hardware Info permssions and sepolicy rules Signed-off-by: pix106 <sbordenave@gmail.com>
2019-08-13 12:38:26 -04:00
# HW Info
/sys/devices/platform/HardwareInfo(/.*)? u:object_r:sysfs_info:s0
/sys/devices/platform/HardwareInfo/gsensor u:object_r:sysfs_info:s0
wayne: sepolicy: Address IR denials Signed-off-by: Isaac Chen <isaacchen@isaacchen.cn>
2018-08-04 19:59:32 -04:00
# IR
sdm66-common: sepolicy: Fix labeling sysfs nodes for K4.19 - Address more denials and label some new nodes Signed-off-by: OdSazib <odsazib@gmail.com>
2021-07-16 04:41:24 -04:00
/dev/lirc0 u:object_r:spidev_device:s0
/dev/spidev7.1 u:object_r:spidev_device:s0
wayne: sepolicy: Address IR denials Signed-off-by: Isaac Chen <isaacchen@isaacchen.cn>
2018-08-04 19:59:32 -04:00
sdm660-common: Add sepolicy for kcal Signed-off-by: bablusss <baaswanthmadhav@gmail.com>
2019-07-20 06:16:00 -04:00
# Kcal
sdm66-common: sepolicy: Fix labeling sysfs nodes for K4.19 - Address more denials and label some new nodes Signed-off-by: OdSazib <odsazib@gmail.com>
2021-07-16 04:41:24 -04:00
/sys/devices/platform/kcal_ctrl.0(/.*)? u:object_r:kcal_dev:s0
/sys/bus/platform/drivers/kcal_ctrl(/.*)? u:object_r:kcal_dev:s0
sdm660-common: XiaomiParts: add notification LED brightness slider Signed-off-by: Dušan Uverić <dusan.uveric9@gmail.com> Change-Id: I86851420cca27d34e36f8e385859c5be63545bba
2020-04-15 09:43:56 -04:00
sdm660-common: ir: Rebrand to Xiaomi SDM660 Change-Id: I20146c0bc065a460f5a86455ed9a21abce5f9417 Signed-off-by: clarencelol <clarencekuiek@icloud.com> Signed-off-by: OdSazib <odsazib@gmail.com>
2021-09-12 19:27:22 -04:00
# IR HAL
/(vendor|system/vendor)/bin/hw/android\.hardware\.ir@1\.0-service\.xiaomi_sdm660 u:object_r:hal_ir_default_exec:s0
wayne: sepolicy: Initial denials Signed-off-by: Isaac Chen <isaacchen@isaacchen.cn>
2018-07-27 08:27:16 -04:00
# Light HAL
sdm660-common: Switch to AIDL Light HAL Signed-off-by: Ratoriku <a1063021545@gmail.com> Change-Id: I2618bcb81902688b9b9b975f612c653707787202 Signed-off-by: pix106 <sbordenave@gmail.com>
2021-09-24 09:13:12 -04:00
/(vendor|system/vendor)/bin/hw/android\.hardware\.lights-service\.xiaomi_sdm660 u:object_r:hal_light_default_exec:s0
wayne: sepolicy: Add sepolicy for goodix script Change-Id: Ic8b7dba6a5660c17f5db1c743e5d22f31ae1b1b3
2018-07-09 11:16:22 -04:00
wayne-common: Support Alipay fingerprint payment * IFAA manager is based on OnePlusOSS, but adapted for Xiaomi's mlipay interface.Also hardcode model detection to pass Alipay check. * vendor.xiaomi.hardware.mtdservice@1.0.so is not actually used, thus patchelf to drop it rather than shipping a blob. * Modify libmlipay.so to allow load firmware from vendor Change-Id: Idf3d3a8d40245984767f4ef5f60f9fe584e69f21
2018-12-23 23:04:48 -05:00
# Mlipay
sdm66-common: sepolicy: Fix labeling sysfs nodes for K4.19 - Address more denials and label some new nodes Signed-off-by: OdSazib <odsazib@gmail.com>
2021-07-16 04:41:24 -04:00
/(vendor|system/vendor)/bin/mlipayd@1.1 u:object_r:hal_mlipay_default_exec:s0
sdm660-common: sepolicy: Update sepolicy and cleanup * Address some denials from android 11 * Fix video recording * Sort in alphabetic order Signed-off-by: OdSazib <odsazib@gmail.com>
2020-08-06 04:08:04 -04:00
# Notification LED
sdm66-common: sepolicy: Fix labeling sysfs nodes for K4.19 - Address more denials and label some new nodes Signed-off-by: OdSazib <odsazib@gmail.com>
2021-07-16 04:41:24 -04:00
/sys/devices/platform/soc/800f000.qcom,spmi/spmi-0/spmi0-03/800f000.qcom,spmi:qcom,pm660l@3:qcom,leds@d000/leds/blue(/.*)? u:object_r:sysfs_graphics:s0
/sys/devices/platform/soc/800f000.qcom,spmi/spmi-0/spmi0-03/800f000.qcom,spmi:qcom,pm660l@3:qcom,leds@d000/leds/green(/.*)? u:object_r:sysfs_graphics:s0
/sys/devices/platform/soc/800f000.qcom,spmi/spmi-0/spmi0-03/800f000.qcom,spmi:qcom,pm660l@3:qcom,leds@d000/leds/red(/.*)? u:object_r:sysfs_graphics:s0
/sys/devices/platform/soc/800f000.qcom,spmi/spmi-0/spmi0-03/800f000.qcom,spmi:qcom,pm660l@3:qcom,leds@d000/leds/white(/.*)? u:object_r:sysfs_graphics:s0
/sys/devices/platform/soc/800f000.qcom,spmi/spmi-0/spmi0-03/800f000.qcom,spmi:qcom,pm660l@3:qcom,leds@d300/leds/flashlight(/.*)? u:object_r:sysfs_graphics:s0
sdm660-common: sepolicy: Update sepolicy and cleanup * Address some denials from android 11 * Fix video recording * Sort in alphabetic order Signed-off-by: OdSazib <odsazib@gmail.com>
2020-08-06 04:08:04 -04:00
sdm660-common: Add sepolicy rules for power-libperfmgr Signed-off-by: OdSazib <odsazib@gmail.com>
2020-11-04 06:20:06 -05:00
# Power
sdm66-common: sepolicy: Fix labeling sysfs nodes for K4.19 - Address more denials and label some new nodes Signed-off-by: OdSazib <odsazib@gmail.com>
2021-07-16 04:41:24 -04:00
/(vendor|system/vendor)/bin/hw/android\.hardware\.power-service\.xiaomi_sdm660-libperfmgr u:object_r:hal_power_default_exec:s0
sdm660-common: sepolicy: Address pixel powerstats rules Signed-off-by: clarencelol <clarencekuiek@icloud.com> Signed-off-by: pix106 <sbordenave@gmail.com>
2021-05-13 00:07:00 -04:00
/(vendor|system/vendor)/bin/hw/android\.hardware\.power\.stats@1\.0-service\.xiaomi_sdm660 u:object_r:hal_power_stats_default_exec:s0
sdm660-common: Add sepolicy rules for power-libperfmgr Signed-off-by: OdSazib <odsazib@gmail.com>
2020-11-04 06:20:06 -05:00
sdm660-common: sepolicy: Rework sepolicy (No more neverallow) - Thanks to LineageOS and our sdm660 community Change-Id: I54c7d76260041b7c383428449e149aa35d51de9b3c
2021-04-17 13:30:26 -04:00
# Root files
sdm66-common: sepolicy: Fix labeling sysfs nodes for K4.19 - Address more denials and label some new nodes Signed-off-by: OdSazib <odsazib@gmail.com>
2021-07-16 04:41:24 -04:00
/proc/sys/fs/protected_regular u:object_r:proc:s0
sdm660-common: sepolicy: Update sepolicy and cleanup * Address some denials from android 11 * Fix video recording * Sort in alphabetic order Signed-off-by: OdSazib <odsazib@gmail.com>
2020-08-06 04:08:04 -04:00
# Service HALs
sdm66-common: sepolicy: Fix labeling sysfs nodes for K4.19 - Address more denials and label some new nodes Signed-off-by: OdSazib <odsazib@gmail.com>
2021-07-16 04:41:24 -04:00
/(vendor|system/vendor)/bin/hw/android\.hardware\.authsecret@1\.0-service u:object_r:hal_authsecret_default_exec:s0
wayne-common: Address denials for P Signed-off-by: Isaac Chen <tingyi364@gmail.com>
2019-07-24 00:04:32 -04:00
sm660-common: Create socket for /dev/socket/audio_hw_socket Change-Id: If4c5b944efb8dde3093ccb7b8f1dca746a02e043
2021-02-22 19:50:07 -05:00
# Sockets
sdm66-common: sepolicy: Fix labeling sysfs nodes for K4.19 - Address more denials and label some new nodes Signed-off-by: OdSazib <odsazib@gmail.com>
2021-07-16 04:41:24 -04:00
/dev/socket/audio_hw_socket u:object_r:audio_socket:s0
sm660-common: Create socket for /dev/socket/audio_hw_socket Change-Id: If4c5b944efb8dde3093ccb7b8f1dca746a02e043
2021-02-22 19:50:07 -05:00
wayne-common: Address denials for P Signed-off-by: Isaac Chen <tingyi364@gmail.com>
2019-07-24 00:04:32 -04:00
# Thermal
sdm66-common: sepolicy: Fix labeling sysfs nodes for K4.19 - Address more denials and label some new nodes Signed-off-by: OdSazib <odsazib@gmail.com>
2021-07-16 04:41:24 -04:00
/data/vendor/thermal(/.*)? u:object_r:thermal_data_file:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.thermal@2\.0-service\.mock u:object_r:hal_thermal_default_exec:s0
sdm660-common: Add basic USB HAL that reports no status change Change-Id: I6d130d324753c03ac514c4500c5764bfa46941dc Signed-off-by: SakilMondal <mondalsakil@gmail.com>
2017-09-17 01:14:00 -04:00
# USB
sdm66-common: sepolicy: Fix labeling sysfs nodes for K4.19 - Address more denials and label some new nodes Signed-off-by: OdSazib <odsazib@gmail.com>
2021-07-16 04:41:24 -04:00
/(vendor|system/vendor)/bin/hw/android\.hardware\.usb@1\.0-service\.xiaomi_sdm660 u:object_r:hal_usb_default_exec:s0
sdm660: sepolicy: Add AuthSecret HAL service
2019-12-19 10:36:58 -05:00
sdm660-common: sepolicy: Update sepolicy and cleanup * Address some denials from android 11 * Fix video recording * Sort in alphabetic order Signed-off-by: OdSazib <odsazib@gmail.com>
2020-08-06 04:08:04 -04:00
# Video4linux sysfs nodes
sdm660-common: sepolicy: rework wakeup nodes Signed-off-by: pix106 <sbordenave@gmail.com>
2021-12-27 11:08:51 -05:00
/sys/devices/platform/soc/caa0000\.qcom,jpeg/video4linux/video1(/.*)? u:object_r:sysfs_graphics:s0
sdm660-common: sepolicy: Label sysfs wakeup nodes avc: denied { read } for comm="Binder:514_1" name="event_count" dev="sysfs" ino=53144 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 avc: denied { read } for comm="Binder:514_1" name="max_time_ms" dev="sysfs" ino=53149 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 avc: denied { read } for comm="Binder:514_1" name="wakeup_count" dev="sysfs" ino=53145 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 avc: denied { read } for comm="Binder:514_1" name="total_time_ms" dev="sysfs" ino=53148 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 avc: denied { read } for comm="Binder:514_1" name="expire_count" dev="sysfs" ino=53146 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 avc: denied { read } for comm="Binder:514_1" name="active_count" dev="sysfs" ino=53143 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 avc: denied { read } for comm="Binder:514_1" name="last_change_ms" dev="sysfs" ino=53150 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 avc: denied { read } for comm="Binder:514_1" name="prevent_suspend_time_ms" dev="sysfs" ino=53151 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 avc: denied { read } for comm="Binder:514_1" name="name" dev="sysfs" ino=53142 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 avc: denied { read } for comm="Binder:514_1" name="active_time_ms" dev="sysfs" ino=53147 scontext=u:r:system_suspend:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 Signed-off-by: pix106 <sbordenave@gmail.com>
2021-07-31 02:52:10 -04:00
# Wakeup
sdm660-common: sepolicy: Label some wakeup nodes Signed-off-by: clarencelol <clarencekuiek@icloud.com> Signed-off-by: pix106 <sbordenave@gmail.com>
2021-12-04 05:08:32 -05:00
/sys/devices/platform/soc/800f000\.qcom,spmi/spmi-0/spmi0-00/800f000\.qcom,spmi:qcom,pm660@0:qcom,qpnp-smb2/power_supply/main/(?!.*wakeup\d+).* u:object_r:sysfs_wakeup:s0
sdm660-common: sepolicy: rework wakeup nodes Signed-off-by: pix106 <sbordenave@gmail.com>
2021-12-27 11:08:51 -05:00
/sys/devices/platform/soc/800f000\.qcom,spmi/spmi-0/spmi0-00/800f000\.qcom,spmi:qcom,pm660@0:qcom,pm660_rtc/rtc/rtc0/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/800f000\.qcom,spmi/spmi-0/spmi0-00/800f000\.qcom,spmi:qcom,pm660@0:qpnp,fg/power_supply/bms/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/800f000\.qcom,spmi/spmi-0/spmi0-00/800f000\.qcom,spmi:qcom,pm660@0:qcom,qpnp-smb2/power_supply/battery/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/800f000\.qcom,spmi/spmi-0/spmi0-00/800f000\.qcom,spmi:qcom,pm660@0:qcom,qpnp-smb2/power_supply/dc/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/800f000\.qcom,spmi/spmi-0/spmi0-00/800f000\.qcom,spmi:qcom,pm660@0:qcom,qpnp-smb2/power_supply/main/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/800f000\.qcom,spmi/spmi-0/spmi0-00/800f000\.qcom,spmi:qcom,pm660@0:qcom,qpnp-smb2/power_supply/pc_port/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/800f000\.qcom,spmi/spmi-0/spmi0-00/800f000\.qcom,spmi:qcom,pm660@0:qcom,qpnp-smb2/power_supply/usb/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/c176000\.i2c/i2c-2/2-001d/power_supply/parallel/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/ca0c000\.qcom,cci/ca0c000\.qcom,cci:qcom,camera@0/video4linux/video[0-9]/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/ca0c000\.qcom,cci/ca0c000\.qcom,cci:qcom,camera@1/video4linux/video[0-9]/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/ca0c000\.qcom,cci/ca0c000\.qcom,cci:qcom,camera@2/video4linux/video[0-9]/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
Reference in a new issue Copy permalink