pa-fazil
/
android_vendor_aospa
mirror of https://github.com/fazilsheik96/android_vendor_aospa.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

vendor: move sepolicy to device/pa/sepolicy 

Change-Id: I0eda57cfd95d313d6cd544983504ed55a608d11b
This commit is contained in:
Jake Weinstein 2019-07-29 15:21:45 -05:00 committed by Hernán Castañón Álvarez
parent a9f6f3238e
commit 292d764015
15 changed files with 0 additions and 66 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
main.mk
View File

@ -141,9 +141,6 @@ PRODUCT_PACKAGES += libbthost_if
PRODUCT_PACKAGES += telephony-ext
PRODUCT_BOOT_JARS += telephony-ext
# Include vendor SEPolicy changes
include vendor/pa/sepolicy/sepolicy.mk
# Include proprietary header flags if vendor/head exists
-include vendor/head/head-capabilities.mk

1
sepolicy/audioserver.te
View File

@ -1 +0,0 @@
binder_call(audioserver, bootanim);

12
sepolicy/dumpstate.te
View File

@ -1,12 +0,0 @@
allow dumpstate app_data_file:fifo_file getattr;
allow dumpstate dalvikcache_data_file:dir r_dir_perms;
allow dumpstate dalvikcache_data_file:file r_file_perms;
allow dumpstate fuse:dir r_dir_perms;
allow dumpstate fuse:file r_file_perms;
allow dumpstate sdcardfs:dir r_dir_perms;
allow dumpstate sdcardfs:file r_file_perms;
allow dumpstate media_rw_data_file:dir r_dir_perms;
allow dumpstate media_rw_data_file:file r_file_perms;

2
sepolicy/file.te
View File

@ -1,2 +0,0 @@
# Pocket judge
type pocket_judge_sysfs, fs_type, sysfs_type;

11
sepolicy/file_contexts
View File

@ -1,11 +0,0 @@
# For EXFAT/F2FS/NTFS partitions marked "formattable"
/system/bin/mkfs\.exfat u:object_r:mkfs_exec:s0
/system/bin/mkfs\.f2fs u:object_r:mkfs_exec:s0
/system/bin/mkfs\.ntfs u:object_r:mkfs_exec:s0
# fsck
/system/bin/fsck\.ntfs u:object_r:fsck_exec:s0
/system/bin/fsck\.exfat u:object_r:fsck_exec:s0
# Pocket judge
/sys/kernel/pocket_judge(/.*)? u:object_r:pocket_judge_sysfs:s0

4
sepolicy/init.te
View File

@ -1,4 +0,0 @@
# Allow formatting userdata or cache partitions
allow init block_device:dir search;
allow init userdata_block_device:blk_file rw_file_perms;
allow init cache_block_device:blk_file rw_file_perms;

5
sepolicy/isolated_app.te
View File

@ -1,5 +0,0 @@
# Rules for gello sandboxed process
allow isolated_app app_data_file:dir search;
allow isolated_app app_data_file:file ioctl;
allow isolated_app untrusted_app:unix_stream_socket ioctl;

9
sepolicy/mkfs.te
View File

@ -1,9 +0,0 @@
type mkfs, coredomain, domain;
type mkfs_exec, exec_type, file_type;
init_daemon_domain(mkfs)
# Allow formatting userdata or cache partitions
allow mkfs block_device:dir search;
allow mkfs userdata_block_device:blk_file rw_file_perms;
allow mkfs cache_block_device:blk_file rw_file_perms;

2
sepolicy/platform_app.te
View File

@ -1,2 +0,0 @@
# Allow Gallery3D to crop user images
allow platform_app system_app_data_file:file rw_file_perms;

2
sepolicy/sepolicy.mk
View File

@ -1,2 +0,0 @@
# This policy configuration will be used by all products that inherit from vendor
BOARD_PLAT_PRIVATE_SEPOLICY_DIR += vendor/pa/sepolicy

2
sepolicy/service.te
View File

@ -1,2 +0,0 @@
type edgegesture_service, system_api_service, system_server_service, service_manager_type;
type pocket_service, system_api_service, system_server_service, service_manager_type;

2
sepolicy/service_contexts
View File

@ -1,2 +0,0 @@
edgegestureservice u:object_r:edgegesture_service:s0
pocket u:object_r:pocket_service:s0

1
sepolicy/system_app.te
View File

@ -1 +0,0 @@
allow system_app selinuxfs:file r_file_perms;

9
sepolicy/system_server.te
View File

@ -1,9 +0,0 @@
allow system_server edgegesture_service:service_manager { add find };
allow system_server pocket_service:service_manager { add find };
allow system_server media_rw_data_file:dir r_dir_perms;
allow system_server user_profile_data_file:dir r_dir_perms;
allow system_server pocket_judge_sysfs:dir search;
allow system_server pocket_judge_sysfs:file rw_file_perms;

1
sepolicy/zygote.te
View File

@ -1 +0,0 @@
allow zygote self:capability sys_nice;