From e2a76a940fdb6ee2fd1ee3f0ec55d02a72942b7f Mon Sep 17 00:00:00 2001 From: Alcatraz323 Date: Thu, 8 Jun 2023 20:24:22 +0800 Subject: [PATCH] sdm660-common: sepolicy: fix denial for cnss_daemon update Signed-off-by: pix106 --- sepolicy/vendor/property.te | 1 + sepolicy/vendor/property_contexts | 8 ++++++++ sepolicy/vendor/wcnss_service.te | 3 +++ 3 files changed, 12 insertions(+) diff --git a/sepolicy/vendor/property.te b/sepolicy/vendor/property.te index 92ff86bc..c8db3af6 100644 --- a/sepolicy/vendor/property.te +++ b/sepolicy/vendor/property.te @@ -6,3 +6,4 @@ vendor_internal_prop(dirac_prop); vendor_internal_prop(vendor_power_prop) vendor_internal_prop(thermal_engine_prop); vendor_public_prop(hal_bluetooth_qti_prop); +vendor_public_prop(vendor_wcnss_service_prop); diff --git a/sepolicy/vendor/property_contexts b/sepolicy/vendor/property_contexts index 5b2f03f1..5382987c 100644 --- a/sepolicy/vendor/property_contexts +++ b/sepolicy/vendor/property_contexts @@ -76,6 +76,14 @@ ro.board.variant u:object_r:exported_default_prop:s0 ro.hwversion u:object_r:exported_default_prop:s0 persist.vendor.slm.enable u:object_r:exported_default_prop:s0 +# Wcnss +vendor.wlan.bdf.path u:object_r:vendor_wcnss_service_prop:s0 +ro.hsm.wifi.bdf.tag u:object_r:vendor_wcnss_service_prop:s0 +ro.hsm.board.variant u:object_r:vendor_wcnss_service_prop:s0 +ro.hsm.som.variant u:object_r:vendor_wcnss_service_prop:s0 +ro.hsm.pcb.vendor u:object_r:vendor_wcnss_service_prop:s0 +ro.hon.plat.imager.sensor u:object_r:vendor_wcnss_service_prop:s0 + # Media gpu.stats.debug.level u:object_r:vendor_default_prop:s0 diff --git a/sepolicy/vendor/wcnss_service.te b/sepolicy/vendor/wcnss_service.te index 20c4e0f9..215acbe4 100644 --- a/sepolicy/vendor/wcnss_service.te +++ b/sepolicy/vendor/wcnss_service.te @@ -4,3 +4,6 @@ allow wcnss_service sysfs:file r_file_perms; allow wcnss_service sysfs_net:dir search; allow wcnss_service vendor_shell_exec:file { x_file_perms execute_no_trans }; allow wcnss_service rootfs:dir { read write open }; + +get_prop(wcnss_service, vendor_wcnss_service_prop) +set_prop(wcnss_service, vendor_wcnss_service_prop) \ No newline at end of file