LineageOS/android_device_qcom_sepolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

sepolicy: Remove poweroffalarm system uid and redundant rules

Browse Source 
remove poweroffalarm system uid and redundant rules

Change-Id: If51e9ae948b68f1187c66d748935fd1014e72e11
This commit is contained in:
Guixiong Wei
2020-11-19 15:14:33 +08:00
committed by Gerrit - the friendly Code Review server
parent ffb6c9041c
commit b69efc2215
3 changed files with 2 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
generic/vendor/common/poweroffalarm_app.te vendored
View File

@@ -30,22 +30,8 @@ app_domain(vendor_poweroffalarm_app);
allow vendor_poweroffalarm_app app_api_service:service_manager find;
allow vendor_poweroffalarm_app mnt_vendor_file:dir r_dir_perms;
allow vendor_poweroffalarm_app vendor_persist_alarm_file:dir rw_dir_perms;
allow vendor_poweroffalarm_app vendor_persist_alarm_file:file create_file_perms;
hal_client_domain(vendor_poweroffalarm_app, vendor_hal_alarm_qti);
hal_client_domain(vendor_poweroffalarm_app, vendor_hal_perf);
binder_call(vendor_poweroffalarm_app, vendor_hal_alarm_qti_default);
allow vendor_poweroffalarm_app system_app_data_file:dir create_dir_perms;
allow vendor_poweroffalarm_app system_app_data_file:{ file lnk_file } create_file_perms;
allow vendor_poweroffalarm_app surfaceflinger_service:service_manager find;
allow vendor_poweroffalarm_app audioserver_service:service_manager find;
allow vendor_poweroffalarm_app mediaserver_service:service_manager find;
get_prop(vendor_poweroffalarm_app, vendor_alarm_boot_prop);
#get_prop(vendor_poweroffalarm_app, vendor_iop_prop)

16
legacy/vendor/common/poweroffalarm_app.te vendored
View File

@@ -30,21 +30,7 @@ app_domain(poweroffalarm_app);
allow poweroffalarm_app app_api_service:service_manager find;
allow poweroffalarm_app mnt_vendor_file:dir r_dir_perms;
allow poweroffalarm_app persist_alarm_file:dir rw_dir_perms;
allow poweroffalarm_app persist_alarm_file:file create_file_perms;
hal_client_domain(poweroffalarm_app, hal_alarm_qti);
allow poweroffalarm_app hal_alarm_qti_default:binder call;
binder_call(poweroffalarm_app, hal_alarm_qti_default);
allow poweroffalarm_app system_app_data_file:dir create_dir_perms;
allow poweroffalarm_app system_app_data_file:{ file lnk_file } create_file_perms;
allow poweroffalarm_app surfaceflinger_service:service_manager find;
allow poweroffalarm_app audioserver_service:service_manager find;
allow poweroffalarm_app mediaserver_service:service_manager find;
get_prop(poweroffalarm_app, vendor_alarm_boot_prop);
get_prop(poweroffalarm_app, vendor_iop_prop)

2
legacy/vendor/common/seapp_contexts vendored
View File

@@ -48,7 +48,7 @@ user=system seinfo=platform name=.imshelperservice domain=imshelper_app type=ims
user=system seinfo=platform name=com.qualcomm.qti.perfdump domain=perfdump_app type=system_app_data_file
#Add new domain for power off alarm app
user=system seinfo=platform name=com.qualcomm.qti.poweroffalarm domain=poweroffalarm_app type=system_app_data_file
user=_app seinfo=platform name=com.qualcomm.qti.poweroffalarm domain=poweroffalarm_app type=app_data_file levelFrom=all
#add new domain for qtidataservices
user=_app seinfo=platform name=.qtidataservices domain=qtidataservices_app type=app_data_file levelFrom=all