Commit 7fc5330a authored Oct 20, 2022 by Blaster4385

nicky: Sepolicy go boom

parent e7bafbf1

sepolicy/vendor/bluetooth.te

0 → 100644

+3 −0

Original line number	Diff line number	Diff line
		allow bluetooth unlabeled:file { read };
		set_prop(bluetooth, vendor_bluetooth_prop)
		allow bluetooth vendor_bluetooth_prop:file open;
		No newline at end of file

sepolicy/vendor/file_contexts

+2 −0

Original line number	Diff line number	Diff line
		@@ -37,3 +37,5 @@

		# Widevine
		/(odm\|vendor/odm)/bin/hw/android\.hardware\.drm@1\.3-service\.widevine u:object_r:hal_drm_widevine_exec:s0

		/(vendor\|system/vendor)/bin/hw/vendor\.qti\.media\.c2@1\.0-service u:object_r:mediacodec_exec:s0

sepolicy/vendor/hal_audio_default.te

0 → 100644

+1 −0

Original line number	Diff line number	Diff line
		allow hal_audio_default default_prop:file { read open };

sepolicy/vendor/hal_camera_default.te

+4 −0

Original line number	Diff line number	Diff line
		@@ -8,3 +8,7 @@ allow hal_camera_default vendor_persist_camera_file:dir w_dir_perms;
		allow hal_camera_default vendor_persist_camera_file:file create_file_perms;

		allow hal_camera_default proc:file { read open };

		allow hal_camera_default default_prop:file { read open getattr };
		allow hal_camera_default system_prop:file { read open getattr };
		allow hal_camera_default unlabeled:file { read open getattr };

sepolicy/vendor/hal_perf_default.te

+5 −0

Original line number	Diff line number	Diff line
		r_dir_file(hal_perf_default, sysfs_usb_supply)
		allow hal_perf_default proc_meminfo:file { read open getattr };
		allow hal_perf_default default_android_hwservice:hwservice_manager find;
		allow hal_perf_default hal_display_config_hwservice:hwservice_manager find;
		allow hal_perf_default self:capability setuid;
		allow hal_perf_default sysfs_kgsl_proc:dir search;