Commit b793e7c9 authored Oct 01, 2017 by fire855

sepolicy: fix new denials

- Fixes factory reset from android settings
- Fixes 5g prop for wifi hal
- Fixes kernel access to nvram files

parent e97c71c3

sepolicy/kernel.te

+1 −0

Original line number	Diff line number	Diff line
		allow kernel nvdata_file:dir search;
		allow kernel nvdata_file:file r_file_perms;
		allow kernel nvdata_file:lnk_file r_file_perms;
		allow kernel wifi_data_file:dir search;
		allow kernel wifi_data_file:file r_file_perms;

sepolicy/nvram_daemon.te

+1 −0

Original line number	Diff line number	Diff line
		@@ -21,5 +21,6 @@ allow nvram_daemon proinfo_device:blk_file rw_file_perms;

		set_prop(nvram_daemon, nvram_prop)
		set_prop(nvram_daemon, wmt_prop)
		set_prop(nvram_daemon, wifi_5g_prop)

		allow nvram_daemon block_device:dir search;

sepolicy/property.te

+1 −0

Original line number	Diff line number	Diff line
		@@ -14,4 +14,5 @@ type audiohal_prop, property_type, mtk_property_type;
		type ril_mux_report_case_prop, property_type, mtk_property_type;
		type ril_msim_power_prop, property_type, mtk_property_type;
		type ril_sim_inserted_status, property_type, mtk_property_type;
		type wifi_5g_prop, property_type, mtk_property_type;
		type vold_encryption_type_prop, property_type;

sepolicy/property_contexts

+1 −0

Original line number	Diff line number	Diff line
		@@ -22,4 +22,5 @@ sys.msim.power.slot0 u:object_r:ril_msim_power_prop:s0
		sys.msim.power.slot1 u:object_r:ril_msim_power_prop:s0
		sys.sim_inserted_status_0 u:object_r:ril_sim_inserted_status:s0
		sys.sim_inserted_status_1 u:object_r:ril_sim_inserted_status:s0
		ro.wlan.mtk.wifi.5g u:object_r:wifi_5g_prop:s0
		vold.encryption.type u:object_r:vold_encryption_type_prop:s0

sepolicy/uncrypt.te

0 → 100644

+1 −0

Original line number	Diff line number	Diff line
		allow uncrypt para_block_device:blk_file rw_file_perms;