Adding sepolicy rules to qva folder

Added label 'u:object_r:sysfs_devfreq:s0'
to gpubw node and 'u:object_r:lm_data_file:s0'
to LM path in file_context for qva and added
mlstrustedsubject for hal_perf_default

Change-Id: I5c035c5fcce7cb29113f377c436e38844e52feab
This commit is contained in:
Richa Agarwal
2019-04-23 14:36:01 +05:30
committed by richagar
parent ae588b7cb8
commit 2a87915b13
2 changed files with 4 additions and 1 deletions

View File

@@ -138,6 +138,8 @@
/sys/devices(/platform)?/soc/[a-z0-9]+\.qcom,pcie/pci[0-9:]+/[0-9:\.]+/[0-9:\.]+/net/wigig0/queues/rx-0/rps_cpus u:object_r:sysfs_wigig:s0
/sys/devices(/platform)?/soc/[a-z0-9]+\.qcom,pcie/pci[0-9:]+/[0-9:\.]+/[0-9:\.]+/net/wigig0/gro_flush_timeout u:object_r:sysfs_wigig:s0
/sys/devices(/platform)?/soc/soc:qcom,gpubw/devfreq/soc:qcom,gpubw(/.*)? u:object_r:sysfs_devfreq:s0
###################################
# data files
#
@@ -154,6 +156,7 @@
/data/vendor/qdma(/.*)? u:object_r:vendor_qdma_data_file:s0
/data/vendor/vpp(/.*)? u:object_r:vendor_vpp_data_file:s0
/data/vendor/wifi/wigig_hostapd(/.*)? u:object_r:wigig_hostapd_socket:s0
/data/vendor/lm(/.*)? u:object_r:lm_data_file:s0
###################################
# persist files

View File

@@ -25,7 +25,7 @@
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
type hal_perf_default, domain;
type hal_perf_default, domain, mlstrustedsubject;
hal_server_domain_bypass(hal_perf_default, hal_perf)
type hal_perf_default_exec, exec_type, vendor_file_type, file_type;