MiPad4/android_device_xiaomi_sdm660-common
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

sdm660-common: sepolicy: cleanup mismatched file & fix bluetooh, fsck denial

Browse source 
* fsck_untrusted(fsck.exfat) is for external sd, and access for sysfs is neverallowed

Signed-off-by: pix106 <sbordenave@gmail.com>
This commit is contained in:
Alcatraz323 2023-07-01 10:09:06 +08:00 committed by pix106
parent 03dac149f0
commit aa160dff7d
5 changed files with 8 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
sepolicy/vendor/fsck_untrusted.te vendored
View file

@ -1 +1,2 @@
allow fsck_untrusted sysfs:file { getattr };
dontaudit fsck_untrusted sysfs:file { read };

1
sepolicy/vendor/hal_bluetooh_qti.te vendored
View file

@ -1 +0,0 @@
allow hal_bluetooth_qti self:qipcrtr_socket create;

3
sepolicy/vendor/hal_bluetooth_qti.te vendored
View file

@ -1,2 +1,5 @@
allow hal_bluetooth_qti diag_device:chr_file rw_file_perms;
allow hal_bluetooth_qti ramdump_vendor_data_file:dir rw_dir_perms;
allow hal_bluetooth_qti self:qipcrtr_socket create;
get_prop(hal_bluetooth_qti, hal_bluetooth_qti_prop)

1
sepolicy/vendor/property.te vendored
View file

@ -5,3 +5,4 @@ vendor_restricted_prop(vendor_camera_prop);
vendor_internal_prop(dirac_prop);
vendor_internal_prop(vendor_power_prop)
vendor_internal_prop(thermal_engine_prop);
vendor_public_prop(hal_bluetooth_qti_prop);

3
sepolicy/vendor/property_contexts vendored
View file

@ -6,6 +6,9 @@ audio_hal.period_multiplier u:object_r:vendor_default_prop:s0
persist.audio.fluence.voicecomm u:object_r:vendor_default_prop:s0
ro.audio.usb.period_us u:object_r:vendor_default_prop:s0
# Bluetooth
ro.hsm.model.num u:object_r:hal_bluetooth_qti_prop:s0
# Camera
camera.clientname u:object_r:vendor_camera_prop:s0
camera.cpp.dumpvideopayload u:object_r:vendor_camera_prop:s0