xiaomi-unicorn1/android_device_qcom_sepolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix sysfs_type dir related neverallows

Browse Source 
Change-Id: I90c2a81aaea542611324c0675b36571fa39d6cae
This commit is contained in:
Sridhar Parasuram
2018-03-27 11:39:58 -07:00
parent fb993fb687
commit 397607a435
2 changed files with 4 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
vendor/common/file.te vendored
View File

@@ -10,8 +10,8 @@ type sysfs_esoc, sysfs_type, fs_type;
type sysfs_fingerprint, sysfs_type, fs_type;
type sysfs_graphics, sysfs_type, fs_type;
type sysfs_kgsl, sysfs_type, fs_type;
type hbtp_kernel_sysfs, file_type, sysfs_type;
type sysfs_irqbalance, file_type, sysfs_type;
type hbtp_kernel_sysfs, sysfs_type, fs_type;
type sysfs_irqbalance, sysfs_type, fs_type;
type sysfs_laser, sysfs_type, fs_type;
type sysfs_mdss_mdp_caps, sysfs_type, fs_type;
type sysfs_mmc_host, fs_type, sysfs_type;
@@ -26,7 +26,7 @@ type sysfs_scsi_host, fs_type, sysfs_type;
type sysfs_slpi, fs_type, sysfs_type;
type sysfs_spmi_dev, sysfs_type, fs_type;
type sysfs_ssr, sysfs_type, fs_type;
type sysfs_ssr_toggle, sysfs_type, file_type;
type sysfs_ssr_toggle, sysfs_type, fs_type;
type sysfs_timestamp_switch, sysfs_type, fs_type;
type sysfs_touch, sysfs_type, fs_type;
type sysfs_uio_file, sysfs_type, fs_type;

8
vendor/common/vendor_init.te vendored
View File

@@ -34,8 +34,6 @@ allow vendor_init ipa_dev:chr_file w_file_perms;
allow vendor_init proc:file write;
allow vendor_init sys_usb_controller_prop:file r_file_perms;
allow vendor_init sysfs_dm:dir w_dir_perms;
allow vendor_init sysfs_dm:file create_file_perms;
allow vendor_init self:capability sys_module;
allow vendor_init vendor_file:system module_load;
@@ -58,11 +56,7 @@ allow vendor_init configfs:lnk_file create_file_perms;
allow vendor_init sysfs_ssr:file write;
#dontaudit non configfs usb denials
dontaudit vendor_init sysfs_android_usb:dir write;
allow vendor_init sysfs_android_usb:dir { add_name };
allow vendor_init sysfs_android_usb:file create_file_perms;
allow vendor_init sysfs_android_usb:file rw_file_perms;
allow vendor_init sysfs_slpi:file write;