Merge tag 'LA.QSSI.12.0.r1-07800.01-qssi.0' into staging/lineage-19.1_merge-LA.QSSI.12.0.r1-07800.01-qssi.0
"LA.QSSI.12.0.r1-07800.01-qssi.0" # By Jaihind Yadav (3) and others # Via Linux Build Service Account (5) and Gerrit - the friendly Code Review server (1) * tag 'LA.QSSI.12.0.r1-07800.01-qssi.0': Sepolicy: make qccsyshal service file path generic in file_contexts correcting 31.0.cil file adding plat_pub_versioned.cil and vendor_sepolicy.cil for 31.0 31.0 prebuilt sepolicy copied from previous version sepolicy sepolicy: Make system app client of vendor hal dspmanager sepolicy: remove the app for qconfig. Allow untrusted apps to be client of the DSP HAL server Change-Id: I98e00e80c2e2e6c7b7e187775633b5077b318f20
This commit is contained in:
Michael Bestas
@@ -26,7 +26,7 @@
|
||||
# OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
|
||||
# ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
#
|
||||
api_versions=(30.0)
|
||||
api_versions=(30.0 31.0)
|
||||
|
||||
dirpath=$(pwd)
|
||||
|
||||
|
||||
29
generic/prebuilts/api/31.0/private/app.te
Normal file
29
generic/prebuilts/api/31.0/private/app.te
Normal file
@@ -0,0 +1,29 @@
|
||||
# Copyright (c) 2017, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
get_prop(appdomain, vendor_persist_dpm_prop)
|
||||
|
||||
31
generic/prebuilts/api/31.0/private/audioserver.te
Normal file
31
generic/prebuilts/api/31.0/private/audioserver.te
Normal file
@@ -0,0 +1,31 @@
|
||||
# Copyright (c) 2018, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
binder_call(audioserver,vendor_wfdservice);
|
||||
|
||||
#allow access to ALSA MMAP FDs for AAudio API
|
||||
allow audioserver audio_service:service_manager find;
|
||||
28
generic/prebuilts/api/31.0/private/bluetooth.te
Normal file
28
generic/prebuilts/api/31.0/private/bluetooth.te
Normal file
@@ -0,0 +1,28 @@
|
||||
# Copyright (c) 2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
unix_socket_connect(bluetooth, vendor_qvrd_controller, vendor_qvrd)
|
||||
42
generic/prebuilts/api/31.0/private/bt_logger.te
Normal file
42
generic/prebuilts/api/31.0/private/bt_logger.te
Normal file
@@ -0,0 +1,42 @@
|
||||
# Copyright (c) 2017, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_bt_logger, domain;
|
||||
type vendor_bt_logger_exec, system_file_type, exec_type, file_type;
|
||||
typeattribute vendor_bt_logger bluetoothdomain;
|
||||
typeattribute vendor_bt_logger coredomain;
|
||||
|
||||
init_daemon_domain(vendor_bt_logger)
|
||||
bluetooth_domain(vendor_bt_logger)
|
||||
|
||||
get_prop(vendor_bt_logger, bluetooth_prop)
|
||||
allow bluetooth vendor_bt_logger:unix_stream_socket connectto;
|
||||
allow vendor_bt_logger bluetooth:unix_stream_socket connectto;
|
||||
|
||||
allow vendor_bt_logger bluetooth_data_file:dir search;
|
||||
allow vendor_bt_logger bluetooth_logs_data_file:dir rw_dir_perms;
|
||||
allow vendor_bt_logger bluetooth_logs_data_file:file create_file_perms;
|
||||
30
generic/prebuilts/api/31.0/private/cameraserver.te
Normal file
30
generic/prebuilts/api/31.0/private/cameraserver.te
Normal file
@@ -0,0 +1,30 @@
|
||||
# Copyright (c) 2019, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
get_prop(cameraserver, vendor_persist_camera_prop)
|
||||
#access to cameraservice apis by faceauth
|
||||
hal_client_domain(cameraserver, hal_face)
|
||||
93
generic/prebuilts/api/31.0/private/compat/31.0/31.0.cil
Executable file
93
generic/prebuilts/api/31.0/private/compat/31.0/31.0.cil
Executable file
@@ -0,0 +1,93 @@
|
||||
(typeattributeset vendor_persist_camera_prop_31_0 (vendor_persist_camera_prop))
|
||||
(expandtypeattribute (vendor_persist_camera_prop_31_0) true)
|
||||
(typeattribute vendor_persist_camera_prop_31_0)
|
||||
(typeattributeset vendor_usta_app_service_31_0 (vendor_usta_app_service))
|
||||
(expandtypeattribute (vendor_usta_app_service_31_0) true)
|
||||
(typeattribute vendor_usta_app_service_31_0)
|
||||
(typeattributeset vendor_qvrd_31_0 (vendor_qvrd))
|
||||
(expandtypeattribute (vendor_qvrd_31_0) true)
|
||||
(typeattribute vendor_qvrd_31_0)
|
||||
(typeattributeset vendor_qtelephony_31_0 (vendor_qtelephony))
|
||||
(expandtypeattribute (vendor_qtelephony_31_0) true)
|
||||
(typeattribute vendor_qtelephony_31_0)
|
||||
(typeattributeset vendor_qcc_trd_31_0 (vendor_qcc_trd))
|
||||
(expandtypeattribute (vendor_qcc_trd_31_0) true)
|
||||
(typeattribute vendor_qcc_trd_31_0)
|
||||
(typeattributeset vendor_dataservice_app_31_0 (vendor_dataservice_app))
|
||||
(expandtypeattribute (vendor_dataservice_app_31_0) true)
|
||||
(typeattribute vendor_dataservice_app_31_0)
|
||||
(typeattributeset vendor_seempd_31_0 (vendor_seempd))
|
||||
(expandtypeattribute (vendor_seempd_31_0) true)
|
||||
(typeattribute vendor_seempd_31_0)
|
||||
(typeattributeset vendor_qcc_utils_app_31_0 (vendor_qcc_utils_app))
|
||||
(expandtypeattribute (vendor_qcc_utils_app_31_0) true)
|
||||
(typeattribute vendor_qcc_utils_app_31_0)
|
||||
(typeattributeset vendor_dpmtcm_socket_31_0 (vendor_dpmtcm_socket))
|
||||
(expandtypeattribute (vendor_dpmtcm_socket_31_0) true)
|
||||
(typeattribute vendor_dpmtcm_socket_31_0)
|
||||
(typeattributeset vendor_sys_video_prop_31_0 (vendor_sys_video_prop))
|
||||
(expandtypeattribute (vendor_sys_video_prop_31_0) true)
|
||||
(typeattribute vendor_sys_video_prop_31_0)
|
||||
(typeattributeset vendor_qcc_app_31_0 (vendor_qcc_app))
|
||||
(expandtypeattribute (vendor_qcc_app_31_0) true)
|
||||
(typeattribute vendor_qcc_app_31_0)
|
||||
(typeattributeset vendor_wfd_app_31_0 (vendor_wfd_app))
|
||||
(expandtypeattribute (vendor_wfd_app_31_0) true)
|
||||
(typeattribute vendor_wfd_app_31_0)
|
||||
(typeattributeset qti-testscripts_31_0 (qti-testscripts))
|
||||
(expandtypeattribute (qti-testscripts_31_0) true)
|
||||
(typeattribute qti-testscripts_31_0)
|
||||
(typeattributeset vendor_bt_prop_31_0 (vendor_bt_prop))
|
||||
(expandtypeattribute (vendor_bt_prop_31_0) true)
|
||||
(typeattribute vendor_bt_prop_31_0)
|
||||
(typeattributeset vendor_mmi_sys_31_0 (vendor_mmi_sys))
|
||||
(expandtypeattribute (vendor_mmi_sys_31_0) true)
|
||||
(typeattribute vendor_mmi_sys_31_0)
|
||||
(typeattributeset vendor_qspmsvc_31_0 (vendor_qspmsvc))
|
||||
(expandtypeattribute (vendor_qspmsvc_31_0) true)
|
||||
(typeattribute vendor_qspmsvc_31_0)
|
||||
(typeattributeset vendor_dpmd_31_0 (vendor_dpmd))
|
||||
(expandtypeattribute (vendor_dpmd_31_0) true)
|
||||
(typeattribute vendor_dpmd_31_0)
|
||||
(typeattributeset vendor_qccsyshal_hwservice_31_0 (vendor_qccsyshal_hwservice))
|
||||
(expandtypeattribute (vendor_qccsyshal_hwservice_31_0) true)
|
||||
(typeattribute vendor_qccsyshal_hwservice_31_0)
|
||||
(typeattributeset vendor_vpsservice_31_0 (vendor_vpsservice))
|
||||
(expandtypeattribute (vendor_vpsservice_31_0) true)
|
||||
(typeattribute vendor_vpsservice_31_0)
|
||||
(typeattributeset vendor_wfdservice_31_0 (vendor_wfdservice))
|
||||
(expandtypeattribute (vendor_wfdservice_31_0) true)
|
||||
(typeattribute vendor_wfdservice_31_0)
|
||||
(typeattributeset vendor_hal_atfwd_hwservice_31_0 (vendor_hal_atfwd_hwservice))
|
||||
(expandtypeattribute (vendor_hal_atfwd_hwservice_31_0) true)
|
||||
(typeattribute vendor_hal_atfwd_hwservice_31_0)
|
||||
(typeattributeset vendor_smcinvoke_device_31_0 (vendor_smcinvoke_device))
|
||||
(expandtypeattribute (vendor_smcinvoke_device_31_0) true)
|
||||
(typeattribute vendor_smcinvoke_device_31_0)
|
||||
(typeattributeset vendor_persist_dpm_prop_31_0 (vendor_persist_dpm_prop))
|
||||
(expandtypeattribute (vendor_persist_dpm_prop_31_0) true)
|
||||
(typeattribute vendor_persist_dpm_prop_31_0)
|
||||
(typeattributeset vendor_dun-server_31_0 (vendor_dun-server))
|
||||
(expandtypeattribute (vendor_dun-server_31_0) true)
|
||||
(typeattribute vendor_dun-server_31_0)
|
||||
(typeattributeset vendor_wlc_prop_31_0 (vendor_wlc_prop))
|
||||
(expandtypeattribute (vendor_wlc_prop_31_0) true)
|
||||
(typeattribute vendor_wlc_prop_31_0)
|
||||
(typeattributeset vendor_elabel_data_file_31_0 (vendor_elabel_data_file))
|
||||
(expandtypeattribute (vendor_elabel_data_file_31_0) true)
|
||||
(typeattribute vendor_elabel_data_file_31_0)
|
||||
(typeattributeset vendor_fm_app_31_0 (vendor_fm_app))
|
||||
(expandtypeattribute (vendor_fm_app_31_0) true)
|
||||
(typeattribute vendor_fm_app_31_0)
|
||||
(typeattributeset vendor_perfservice_31_0 (vendor_perfservice))
|
||||
(expandtypeattribute (vendor_perfservice_31_0) true)
|
||||
(typeattribute vendor_perfservice_31_0)
|
||||
(typeattributeset vendor_sigmahal_hwservice_31_0 (vendor_sigmahal_hwservice))
|
||||
(expandtypeattribute (vendor_sigmahal_hwservice_31_0) true)
|
||||
(typeattribute vendor_sigmahal_hwservice_31_0)
|
||||
(typeattributeset vendor_location_app_31_0 (vendor_location_app))
|
||||
(expandtypeattribute (vendor_location_app_31_0) true)
|
||||
(typeattribute vendor_location_app_31_0)
|
||||
(typeattributeset vendor_seempdw_socket_31_0 (vendor_seempdw_socket))
|
||||
(expandtypeattribute (vendor_seempdw_socket_31_0) true)
|
||||
(typeattribute vendor_seempdw_socket_31_0)
|
||||
53
generic/prebuilts/api/31.0/private/dataservice_app.te
Executable file
53
generic/prebuilts/api/31.0/private/dataservice_app.te
Executable file
@@ -0,0 +1,53 @@
|
||||
# Copyright (c) 2019-2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
typeattribute vendor_dataservice_app coredomain;
|
||||
app_domain(vendor_dataservice_app)
|
||||
net_domain(vendor_dataservice_app)
|
||||
|
||||
add_service(vendor_dataservice_app, vendor_cne_service)
|
||||
add_service(vendor_dataservice_app, vendor_dpmservice)
|
||||
add_service(vendor_dataservice_app, uce_service)
|
||||
allow vendor_dataservice_app {
|
||||
app_api_service
|
||||
system_api_service
|
||||
audioserver_service
|
||||
radio_service
|
||||
}:service_manager find;
|
||||
|
||||
allow vendor_dataservice_app radio_data_file:dir create_dir_perms;
|
||||
allow vendor_dataservice_app radio_data_file:{ file lnk_file } create_file_perms;
|
||||
|
||||
hwbinder_use(vendor_dataservice_app)
|
||||
|
||||
add_service(vendor_dataservice_app, vendor_dpmservice)
|
||||
allow vendor_dataservice_app system_app_data_file:dir create_dir_perms;
|
||||
allow vendor_dataservice_app vendor_dpmd_socket:sock_file write;
|
||||
allow vendor_dataservice_app vendor_dpmd_data_file:dir rw_dir_perms;
|
||||
allow vendor_dataservice_app vendor_dpmd_data_file:file create_file_perms;
|
||||
unix_socket_connect(vendor_dataservice_app,vendor_dpmd,vendor_dpmd);
|
||||
set_prop(vendor_dataservice_app, vendor_persist_dpm_prop)
|
||||
30
generic/prebuilts/api/31.0/private/device.te
Normal file
30
generic/prebuilts/api/31.0/private/device.te
Normal file
@@ -0,0 +1,30 @@
|
||||
# Copyright (c) 2015, 2017, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
|
||||
#Define smd7 device
|
||||
type vendor_smd7_device, dev_type;
|
||||
29
generic/prebuilts/api/31.0/private/domain.te
Normal file
29
generic/prebuilts/api/31.0/private/domain.te
Normal file
@@ -0,0 +1,29 @@
|
||||
# Copyright (c) 2019, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
get_prop(domain, vendor_exported_system_prop)
|
||||
get_prop(domain, vendor_exported_odm_prop)
|
||||
75
generic/prebuilts/api/31.0/private/dpmd.te
Normal file
75
generic/prebuilts/api/31.0/private/dpmd.te
Normal file
@@ -0,0 +1,75 @@
|
||||
# Copyright (c) 2018, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
|
||||
typeattribute vendor_dpmd coredomain;
|
||||
typeattribute vendor_dpmd mlstrustedsubject;
|
||||
type vendor_dpmd_exec, exec_type, system_file_type, file_type;
|
||||
|
||||
init_daemon_domain(vendor_dpmd)
|
||||
|
||||
net_domain(vendor_dpmd)
|
||||
|
||||
allow vendor_dpmd {
|
||||
vendor_dpmd_exec
|
||||
system_file
|
||||
}:file x_file_perms;
|
||||
|
||||
allow vendor_dpmd vendor_dpmd_data_file:file create_file_perms;
|
||||
allow vendor_dpmd vendor_dpmd_data_file:dir create_dir_perms;
|
||||
r_dir_file(vendor_dpmd,proc_net)
|
||||
|
||||
allow vendor_dpmd self:capability {
|
||||
setuid
|
||||
net_raw
|
||||
net_admin
|
||||
};
|
||||
|
||||
allow vendor_dpmd netutils_wrapper:process sigkill;
|
||||
allow vendor_dpmd self:capability2 wake_alarm;
|
||||
|
||||
r_dir_file(vendor_dpmd, appdomain)
|
||||
|
||||
wakelock_use(vendor_dpmd)
|
||||
allow vendor_dpmd shell_exec:file rx_file_perms;
|
||||
dontaudit vendor_dpmd self:capability sys_module;
|
||||
set_prop(vendor_dpmd, vendor_persist_dpm_prop)
|
||||
get_prop(vendor_dpmd, vendor_persist_dpm_prop)
|
||||
#allow vendor_dpmd to create socket
|
||||
allow vendor_dpmd self:socket create_socket_perms_no_ioctl;
|
||||
allow vendor_dpmd self:{ netlink_socket netlink_generic_socket } create_socket_perms_no_ioctl;
|
||||
vendor_dpmd_socket_perm(priv_app)
|
||||
vendor_dpmd_socket_perm(system_server)
|
||||
vendor_dpmd_socket_perm(system_app)
|
||||
vendor_dpmd_socket_perm(untrusted_app)
|
||||
vendor_dpmd_socket_perm(untrusted_app_25)
|
||||
vendor_dpmd_socket_perm(platform_app)
|
||||
#allow vendor_dpmd to write to /proc/net/sys
|
||||
allow vendor_dpmd proc_net:file write;
|
||||
#self kill rule to kill vendor_dpmd child process which executes iptable commands
|
||||
allow vendor_dpmd self:capability kill;
|
||||
set_prop(vendor_dpmd, ctl_dpmd_prop)
|
||||
40
generic/prebuilts/api/31.0/private/dun-server.te
Normal file
40
generic/prebuilts/api/31.0/private/dun-server.te
Normal file
@@ -0,0 +1,40 @@
|
||||
# Copyright (c) 2017, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_dun-server_exec, system_file_type, exec_type, file_type;
|
||||
typeattribute vendor_dun-server bluetoothdomain;
|
||||
typeattribute vendor_dun-server coredomain;
|
||||
|
||||
allow bluetooth vendor_dun-server:unix_stream_socket connectto;
|
||||
allow vendor_dun-server {
|
||||
serial_device
|
||||
vendor_smd7_device
|
||||
}:chr_file rw_file_perms;
|
||||
|
||||
init_daemon_domain(vendor_dun-server)
|
||||
|
||||
bluetooth_domain(vendor_dun-server)
|
||||
37
generic/prebuilts/api/31.0/private/file.te
Normal file
37
generic/prebuilts/api/31.0/private/file.te
Normal file
@@ -0,0 +1,37 @@
|
||||
# Copyright (c) 2015, 2017-2020 The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_seemp_data_file, core_data_file_type, data_file_type, file_type;
|
||||
type vendor_dpmd_socket, file_type, coredomain_socket;
|
||||
type vendor_dpmd_data_file, file_type, data_file_type, core_data_file_type;
|
||||
type vendor_dpmwrapper_socket, file_type, coredomain_socket, mlstrustedobject;
|
||||
type vendor_qvrd_data_file, file_type, data_file_type, core_data_file_type;
|
||||
type vendor_qvrd_socket, file_type, mlstrustedobject, coredomain_socket;
|
||||
type vendor_qvrd_controller_socket, file_type, coredomain_socket;
|
||||
type vendor_qvrd_hvx_socket, file_type, coredomain_socket;
|
||||
type vendor_qcc_data_file, file_type, data_file_type, core_data_file_type;
|
||||
type vendor_qcc_app_socket, file_type, mlstrustedobject, coredomain_socket;
|
||||
70
generic/prebuilts/api/31.0/private/file_contexts
Normal file
70
generic/prebuilts/api/31.0/private/file_contexts
Normal file
@@ -0,0 +1,70 @@
|
||||
# Copyright (c) 2018-2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
# KEYSTONE(I4a15c386145339100de054925e52506540e6ddd0,b/201434325)
|
||||
/data/misc/elabel(/.*)? u:object_r:vendor_elabel_data_file:s0
|
||||
/data/misc/seemp(/.*)? u:object_r:vendor_seemp_data_file:s0
|
||||
|
||||
/(product|system/product)/etc/init\.qcom\.testscripts\.sh u:object_r:qti-testscripts_exec:s0
|
||||
|
||||
/storage/emulated(/.*)? u:object_r:media_rw_data_file:s0
|
||||
|
||||
####### device files ##############
|
||||
/dev/smd7 u:object_r:vendor_smd7_device:s0
|
||||
|
||||
####### dev/socket files ##########
|
||||
/dev/socket/seempdw u:object_r:vendor_seempdw_socket:s0
|
||||
/dev/socket/dpmd u:object_r:vendor_dpmd_socket:s0
|
||||
/dev/socket/tcm u:object_r:vendor_dpmtcm_socket:s0
|
||||
/dev/socket/qvrservice u:object_r:vendor_qvrd_socket:s0
|
||||
/dev/socket/qvrservice_controller u:object_r:vendor_qvrd_controller_socket:s0
|
||||
/dev/socket/qvrservice_camera u:object_r:vendor_qvrd_socket:s0
|
||||
/dev/socket/qvrservice_hvx_camera u:object_r:vendor_qvrd_hvx_socket:s0
|
||||
/dev/socket/qdma_app(/.*)? u:object_r:vendor_qcc_app_socket:s0
|
||||
|
||||
####### system file ###############
|
||||
/system/bin/seempd u:object_r:vendor_seempd_exec:s0
|
||||
/(system_ext|system/system_ext)/bin/dpmd u:object_r:vendor_dpmd_exec:s0
|
||||
/(system_ext|system/system_ext)/bin/qvrservice u:object_r:vendor_qvrd_exec:s0
|
||||
/system/bin/vpsservice u:object_r:vendor_vpsservice_exec:s0
|
||||
|
||||
####### system_ext file ###############
|
||||
/(system_ext|system/system_ext)/bin/dun-server u:object_r:vendor_dun-server_exec:s0
|
||||
/(system_ext|system/system_ext)/bin/bt_logger u:object_r:vendor_bt_logger_exec:s0
|
||||
/(system_ext|system/system_ext)/bin/perfservice u:object_r:vendor_perfservice_exec:s0
|
||||
/(system_ext|system/system_ext)/bin/qdtservice u:object_r:vendor_qdtservice_exec:s0
|
||||
/(system|system_ext|system/system_ext)/bin/wfdservice u:object_r:vendor_wfdservice_exec:s0
|
||||
/(system|system_ext|system/system_ext)/bin/sigma_miracasthalservice u:object_r:vendor_sigmahal_qti_exec:s0
|
||||
/(system_ext|system/system_ext)/bin/qccsyshalservice u:object_r:vendor_qccsyshal_qti_exec:s0
|
||||
/(system_ext|system/system_ext)/bin/mmi u:object_r:vendor_mmi_sys_exec:s0
|
||||
/(system_ext|system/system_ext)/bin/mmi_diag u:object_r:vendor_mmi_sys_exec:s0
|
||||
/(system_ext|system/system_ext)/bin/qspmsvc u:object_r:vendor_qspmsvc_exec:s0
|
||||
|
||||
####### data files ################
|
||||
/data/dpm(/.*)? u:object_r:vendor_dpmd_data_file:s0
|
||||
/data/misc/qvr(/.*)? u:object_r:vendor_qvrd_data_file:s0
|
||||
/data/nfc(/.*)? u:object_r:nfc_data_file:s0
|
||||
/data/misc/qdma(/.*)? u:object_r:vendor_qcc_data_file:s0
|
||||
39
generic/prebuilts/api/31.0/private/fm_app.te
Normal file
39
generic/prebuilts/api/31.0/private/fm_app.te
Normal file
@@ -0,0 +1,39 @@
|
||||
# Copyright (c) 2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
typeattribute vendor_fm_app coredomain;
|
||||
app_domain(vendor_fm_app)
|
||||
|
||||
hal_client_domain(vendor_fm_app, vendor_hal_fm);
|
||||
hal_client_domain(vendor_fm_app, vendor_hal_btconfigstore);
|
||||
hal_client_domain(vendor_fm_app, vendor_hal_qspmhal);
|
||||
|
||||
binder_call(vendor_fm_app, gpuservice)
|
||||
allow vendor_fm_app radio_service:service_manager find;
|
||||
allow vendor_fm_app audioserver_service:service_manager find;
|
||||
allow vendor_fm_app mediaserver_service:service_manager find;
|
||||
allow vendor_fm_app app_api_service:service_manager find;
|
||||
59
generic/prebuilts/api/31.0/private/hal_qccsyshalservice.te
Normal file
59
generic/prebuilts/api/31.0/private/hal_qccsyshalservice.te
Normal file
@@ -0,0 +1,59 @@
|
||||
# Copyright (c) 2020 The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_qccsyshal_qti, domain, coredomain;
|
||||
type vendor_qccsyshal_qti_exec, system_file_type , exec_type, file_type;
|
||||
|
||||
hal_server_domain(vendor_qccsyshal_qti, vendor_qccsyshal);
|
||||
|
||||
#Add hwservice related rules
|
||||
hal_attribute_hwservice(vendor_qccsyshal, vendor_qccsyshal_hwservice);
|
||||
|
||||
#Allow for transition from init domain to qccsyshal
|
||||
init_daemon_domain(vendor_qccsyshal_qti)
|
||||
|
||||
#Allow the interaction with servicemanager
|
||||
binder_use(vendor_qccsyshal_qti)
|
||||
|
||||
#Allow hwbinder call from hal client to server
|
||||
binder_call(vendor_qccsyshal_client, vendor_qccsyshal_server)
|
||||
binder_call(vendor_qccsyshal_server, vendor_qccsyshal_client)
|
||||
|
||||
allow vendor_qccsyshal_client vendor_qccsyshal_hwservice:hwservice_manager find;
|
||||
|
||||
# allow access to qdma dropbox (/data/misc/qdma)
|
||||
allow vendor_qccsyshal_qti vendor_qcc_data_file:dir create_dir_perms;
|
||||
allow vendor_qccsyshal_qti vendor_qcc_data_file:file create_file_perms;
|
||||
|
||||
# allow access to vendor_qcc_app_socket
|
||||
unix_socket_connect(vendor_qccsyshal_qti, vendor_qcc_app, vendor_qcc_app)
|
||||
allow vendor_qccsyshal_qti vendor_qcc_app_socket:dir r_dir_perms;
|
||||
allow vendor_qccsyshal_qti vendor_qcc_app_socket:sock_file rw_file_perms;
|
||||
|
||||
userdebug_or_eng(`
|
||||
allow vendor_qccsyshal_qti vendor_qcc_lmtp_app:unix_stream_socket connectto;
|
||||
')
|
||||
29
generic/prebuilts/api/31.0/private/hwservice_contexts
Normal file
29
generic/prebuilts/api/31.0/private/hwservice_contexts
Normal file
@@ -0,0 +1,29 @@
|
||||
# Copyright (c) 2019-2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED"AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
vendor.qti.hardware.sigma_miracast::Isigma_miracast u:object_r:vendor_sigmahal_hwservice:s0
|
||||
vendor.qti.hardware.qccsyshal::IQccsyshal u:object_r:vendor_qccsyshal_hwservice:s0
|
||||
34
generic/prebuilts/api/31.0/private/ioctl_defines
Normal file
34
generic/prebuilts/api/31.0/private/ioctl_defines
Normal file
@@ -0,0 +1,34 @@
|
||||
# Copyright (c) 2017, The Linux Foundation. All rights reserved.
|
||||
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
# socket ioctls defined in the kernel in include/uapi/linux/msm_ipc.h
|
||||
define(`IPC_ROUTER_IOCTL_GET_VERSION', `0x0000c300')
|
||||
define(`IPC_ROUTER_IOCTL_GET_MTU', `0x0000c301')
|
||||
define(`IPC_ROUTER_IOCTL_LOOKUP_SERVER', `0x0000c302')
|
||||
define(`IPC_ROUTER_IOCTL_GET_CURR_PKT_SIZE', `0x0000c303')
|
||||
define(`IPC_ROUTER_IOCTL_BIND_CONTROL_PORT', `0x0000c304')
|
||||
define(`IPC_ROUTER_IOCTL_CONFIG_SEC_RULES', `0x0000c305')
|
||||
35
generic/prebuilts/api/31.0/private/ioctl_macros
Normal file
35
generic/prebuilts/api/31.0/private/ioctl_macros
Normal file
@@ -0,0 +1,35 @@
|
||||
# Copyright (c) 2017, The Linux Foundation. All rights reserved.
|
||||
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
define(`msm_sock_ipc_ioctls_system', `{
|
||||
IPC_ROUTER_IOCTL_GET_VERSION
|
||||
IPC_ROUTER_IOCTL_GET_MTU
|
||||
IPC_ROUTER_IOCTL_LOOKUP_SERVER
|
||||
IPC_ROUTER_IOCTL_GET_CURR_PKT_SIZE
|
||||
IPC_ROUTER_IOCTL_BIND_CONTROL_PORT
|
||||
IPC_ROUTER_IOCTL_CONFIG_SEC_RULES
|
||||
}')
|
||||
53
generic/prebuilts/api/31.0/private/location_app.te
Normal file
53
generic/prebuilts/api/31.0/private/location_app.te
Normal file
@@ -0,0 +1,53 @@
|
||||
# Copyright (c) 2019, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
# generic/vendor_location_app.te - sepolicy rules for qti value added location apps
|
||||
# that will be part of system image. Eg: XT app.
|
||||
|
||||
app_domain(vendor_location_app)
|
||||
binder_use(vendor_location_app)
|
||||
hal_client_domain(vendor_location_app, hal_gnss)
|
||||
|
||||
net_domain(vendor_location_app)
|
||||
|
||||
#Permissions for JDWP
|
||||
userdebug_or_eng(`
|
||||
allow vendor_location_app { adbd su }:unix_stream_socket connectto;
|
||||
')
|
||||
|
||||
allow vendor_location_app app_api_service:service_manager find;
|
||||
|
||||
allow vendor_location_app system_app_data_file:dir create_dir_perms;
|
||||
allow vendor_location_app system_app_data_file:file create_file_perms;
|
||||
|
||||
allow vendor_location_app radio_service:service_manager find;
|
||||
|
||||
unix_socket_connect(vendor_location_app, vendor_dpmtcm, vendor_dpmd);
|
||||
|
||||
allow vendor_location_app cgroup:file rw_file_perms;
|
||||
|
||||
unix_socket_send(vendor_location_app, vendor_seempdw, vendor_seempd);
|
||||
29
generic/prebuilts/api/31.0/private/mediaextractor.te
Normal file
29
generic/prebuilts/api/31.0/private/mediaextractor.te
Normal file
@@ -0,0 +1,29 @@
|
||||
# Copyright (c) 2019, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
get_prop(mediaextractor, vendor_mm_parser_prop);
|
||||
get_prop(mediaextractor, vendor_mm_osal_prop);
|
||||
29
generic/prebuilts/api/31.0/private/mediaprovider.te
Normal file
29
generic/prebuilts/api/31.0/private/mediaprovider.te
Normal file
@@ -0,0 +1,29 @@
|
||||
# Copyright (c) 2018, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
allow mediaprovider vendor_dpmtcm_socket:sock_file w_file_perms;
|
||||
allow mediaprovider vendor_dpmd:unix_stream_socket connectto;
|
||||
31
generic/prebuilts/api/31.0/private/mediaserver.te
Normal file
31
generic/prebuilts/api/31.0/private/mediaserver.te
Normal file
@@ -0,0 +1,31 @@
|
||||
# Copyright (c) 2018, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
unix_socket_send(mediaserver, vendor_seempdw, vendor_seempd)
|
||||
|
||||
get_prop(mediaserver, vendor_mm_video_prop)
|
||||
get_prop(mediaserver, vendor_sys_video_prop)
|
||||
45
generic/prebuilts/api/31.0/private/mmi_sys.te
Executable file
45
generic/prebuilts/api/31.0/private/mmi_sys.te
Executable file
@@ -0,0 +1,45 @@
|
||||
# Copyright (c) 2018, The Linux Foundation. All rights reserved.
|
||||
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
typeattribute vendor_mmi_sys coredomain;
|
||||
type vendor_mmi_sys_exec, system_file_type, exec_type, file_type;
|
||||
|
||||
#init
|
||||
init_daemon_domain(vendor_mmi_sys)
|
||||
|
||||
#Allow mmi to use IPC
|
||||
binder_call(vendor_mmi_sys,surfaceflinger)
|
||||
binder_use(vendor_mmi_sys)
|
||||
|
||||
#mmi_sys
|
||||
allow vendor_mmi_sys ion_device:chr_file r_file_perms;
|
||||
allow vendor_mmi_sys surfaceflinger_service:service_manager find;
|
||||
hal_client_domain(vendor_mmi_sys, hal_graphics_allocator)
|
||||
allow vendor_mmi_sys vendor_mmi_sys_exec:file execute_no_trans;
|
||||
|
||||
allow vendor_mmi_sys gpu_device:chr_file rw_file_perms;
|
||||
allow vendor_mmi_sys kmsg_device:chr_file w_file_perms;
|
||||
35
generic/prebuilts/api/31.0/private/perfservice.te
Normal file
35
generic/prebuilts/api/31.0/private/perfservice.te
Normal file
@@ -0,0 +1,35 @@
|
||||
# Copyright (c) 2018, The Linux Foundation. All rights reserved.
|
||||
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_perfservice_exec, exec_type, system_file_type, file_type;
|
||||
|
||||
init_daemon_domain(vendor_perfservice)
|
||||
|
||||
add_service(vendor_perfservice, vendor_perf_service);
|
||||
binder_use(vendor_perfservice);
|
||||
binder_call(vendor_perfservice, system_server);
|
||||
binder_service(vendor_perfservice);
|
||||
48
generic/prebuilts/api/31.0/private/platform_app.te
Executable file
48
generic/prebuilts/api/31.0/private/platform_app.te
Executable file
@@ -0,0 +1,48 @@
|
||||
# Copyright (c) 2019, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
#allow platform_app to read vendor_camera_prop
|
||||
get_prop(platform_app, vendor_persist_camera_prop)
|
||||
# Allow cneservice to be found
|
||||
allow platform_app vendor_cne_service:service_manager find;
|
||||
|
||||
# Allow vendor_dpmservice to be found
|
||||
allow platform_app vendor_dpmservice:service_manager find;
|
||||
allow platform_app { vendor_dpmd_socket vendor_dpmtcm_socket }:sock_file w_file_perms;
|
||||
allow platform_app vendor_dpmd:unix_stream_socket connectto;
|
||||
userdebug_or_eng(`
|
||||
r_dir_file(platform_app, vendor_seemp_data_file)
|
||||
allow platform_app vendor_seemp_data_file: file w_file_perms;
|
||||
')
|
||||
allow platform_app vendor_color_service:service_manager find;
|
||||
# WigigSettings need to read persist.vendor.wigig.icon.disable
|
||||
get_prop(platform_app, vendor_wigig_core_prop)
|
||||
# SVA app and OEM voice activation app need to find soundtrigger_middleware_service
|
||||
allow platform_app soundtrigger_middleware_service:service_manager find;
|
||||
|
||||
# allow platform_app access to Workload Classifier Property
|
||||
set_prop(platform_app, vendor_wlc_prop);
|
||||
32
generic/prebuilts/api/31.0/private/priv_app.te
Executable file
32
generic/prebuilts/api/31.0/private/priv_app.te
Executable file
@@ -0,0 +1,32 @@
|
||||
# Copyright (c) 2019, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
get_prop(priv_app, vendor_persist_camera_prop)
|
||||
allow priv_app vendor_dpmtcm_socket:sock_file w_file_perms;
|
||||
allow priv_app vendor_dpmd:unix_stream_socket connectto;
|
||||
# QVA app need to find soundtrigger_middleware_service
|
||||
allow priv_app soundtrigger_middleware_service:service_manager find;
|
||||
43
generic/prebuilts/api/31.0/private/property.te
Normal file
43
generic/prebuilts/api/31.0/private/property.te
Normal file
@@ -0,0 +1,43 @@
|
||||
# Copyright (c) 2019-2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
# QCV: define property type vendor_exported_system_prop
|
||||
# and vendor_exported_odm_prop
|
||||
vendor_restricted_prop(vendor_exported_system_prop);
|
||||
vendor_restricted_prop(vendor_exported_odm_prop);
|
||||
|
||||
#mm-osal
|
||||
system_internal_prop(vendor_mm_osal_prop)
|
||||
system_internal_prop(vendor_mm_video_prop)
|
||||
|
||||
#WiFi Display
|
||||
system_internal_prop(vendor_wfd_service_prop)
|
||||
system_internal_prop(vendor_wfd_sys_debug_prop)
|
||||
# WIGIG
|
||||
system_internal_prop(vendor_wigig_core_prop)
|
||||
system_internal_prop(vendor_fst_prop)
|
||||
system_internal_prop(ctl_dpmd_prop)
|
||||
85
generic/prebuilts/api/31.0/private/property_contexts
Normal file
85
generic/prebuilts/api/31.0/private/property_contexts
Normal file
@@ -0,0 +1,85 @@
|
||||
# Copyright (c) 2019-2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
ro.vendor.qti.va_aosp.support u:object_r:vendor_exported_system_prop:s0 exact bool
|
||||
ro.vendor.qti.va_odm.support u:object_r:vendor_exported_odm_prop:s0 exact bool
|
||||
ro.vendor.perf.scroll_opt u:object_r:vendor_exported_system_prop:s0 exact bool
|
||||
ro.vendor.perf.scroll_opt.heavy_app u:object_r:vendor_exported_system_prop:s0 exact int
|
||||
|
||||
persist.vendor.dpm. u:object_r:vendor_persist_dpm_prop:s0
|
||||
persist.vendor.btstack u:object_r:bluetooth_prop:s0
|
||||
persist.vendor.bluetooth.emailaccountcount u:object_r:bluetooth_prop:s0
|
||||
persist.vendor.bt.a2dp u:object_r:bluetooth_prop:s0
|
||||
persist.vendor.bt_logger. u:object_r:bluetooth_prop:s0
|
||||
persist.vendor.service.bt. u:object_r:bluetooth_prop:s0
|
||||
ro.vendor.btstack. u:object_r:bluetooth_prop:s0
|
||||
vendor.pts. u:object_r:bluetooth_prop:s0
|
||||
vendor.bt.pts. u:object_r:bluetooth_prop:s0
|
||||
vendor.bluetooth. u:object_r:bluetooth_prop:s0
|
||||
vendor.camera.aux.packagelist u:object_r:vendor_persist_camera_prop:s0
|
||||
persist.vendor.camera.privapp.list u:object_r:vendor_persist_camera_prop:s0
|
||||
|
||||
#mm-parser
|
||||
vendor.mm.enable.qcom_parser u:object_r:vendor_mm_parser_prop:s0
|
||||
vendor.qcom_parser. u:object_r:vendor_mm_parser_prop:s0
|
||||
#mm-osal
|
||||
vendor.debug.mmosal.config u:object_r:vendor_mm_osal_prop:s0
|
||||
|
||||
#perf
|
||||
vendor.perf.workloadclassifier.enable u:object_r:vendor_wlc_prop:s0
|
||||
persist.vendor.build.date.utc u:object_r:vendor_wlc_prop:s0
|
||||
|
||||
#mm-video
|
||||
persist.vendor.debug.av.logs.lvl u:object_r:debug_prop:s0
|
||||
persist.vendor.debug.en.drpcrpt u:object_r:vendor_mm_video_prop:s0
|
||||
persist.vendor.media.hls. u:object_r:vendor_mm_video_prop:s0
|
||||
persist.vendor.sys.media.rtp-ports u:object_r:vendor_mm_video_prop:s0
|
||||
vendor.encoder.video.profile u:object_r:vendor_mm_video_prop:s0
|
||||
vendor.sys.media.target.version u:object_r:vendor_sys_video_prop:s0
|
||||
vendor.sys.video.disable.ubwc u:object_r:vendor_sys_video_prop:s0
|
||||
vendor.sys.media.target.qssi u:object_r:vendor_sys_video_prop:s0
|
||||
|
||||
#Wifi Display
|
||||
vendor.wfdservice u:object_r:vendor_wfd_service_prop:s0
|
||||
persist.vendor.debug.wfd.wfdsvc u:object_r:vendor_wfd_sys_debug_prop:s0
|
||||
persist.vendor.debug.wfdcdbg u:object_r:vendor_wfd_sys_debug_prop:s0
|
||||
persist.vendor.debug.wfdcdbgv u:object_r:vendor_wfd_sys_debug_prop:s0
|
||||
persist.vendor.sys.debug.mux. u:object_r:vendor_wfd_sys_debug_prop:s0
|
||||
persist.vendor.sys.debug.rtp. u:object_r:vendor_wfd_sys_debug_prop:s0
|
||||
persist.vendor.sys.debug.wfd. u:object_r:vendor_wfd_sys_debug_prop:s0
|
||||
|
||||
# WIGIG
|
||||
persist.vendor.wigig. u:object_r:vendor_wigig_core_prop:s0
|
||||
persist.vendor.fst. u:object_r:vendor_fst_prop:s0
|
||||
persist.dpm.feature u:object_r:vendor_persist_dpm_prop:s0
|
||||
ctl.stop$dpmd u:object_r:ctl_dpmd_prop:s0
|
||||
|
||||
# Beluga
|
||||
ro.vendor.beluga.p u:object_r:vendor_exported_system_prop:s0
|
||||
ro.vendor.beluga.c u:object_r:vendor_exported_system_prop:s0
|
||||
ro.vendor.beluga.s u:object_r:vendor_exported_system_prop:s0
|
||||
ro.vendor.beluga.t u:object_r:vendor_exported_system_prop:s0
|
||||
72
generic/prebuilts/api/31.0/private/qcc_app.te
Normal file
72
generic/prebuilts/api/31.0/private/qcc_app.te
Normal file
@@ -0,0 +1,72 @@
|
||||
# Copyright (c) 2020 The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
|
||||
app_domain(vendor_qcc_app)
|
||||
net_domain(vendor_qcc_app)
|
||||
binder_use(vendor_qcc_app)
|
||||
|
||||
# allow invoking activity and access app content to vendor_qcc_app
|
||||
#allow vendor_qcc_app { activity_service content_service }:service_manager find;
|
||||
# allow display service to vendor_qcc_app
|
||||
#allow vendor_qcc_app { display_service }:service_manager find;
|
||||
# allow access to wifi and data network to vendor_qcc_app
|
||||
#allow vendor_qcc_app { connectivity_service network_management_service }:service_manager find;
|
||||
# allow access telephony service info to vendor_qcc_app
|
||||
#allow vendor_qcc_app { radio_service registry_service }:service_manager find;
|
||||
allow vendor_qcc_app radio_service:service_manager find;
|
||||
# allow acquire wakelock to vendor_qcc_app
|
||||
#allow vendor_qcc_app { power_service }:service_manager find;
|
||||
# allow to load native library
|
||||
#allow vendor_qcc_app { mount_service }:service_manager find;
|
||||
# for vendor_perf_service
|
||||
allow vendor_qcc_app app_api_service:service_manager find;
|
||||
|
||||
# allow access to qdma dropbox (/data/misc/qdma)
|
||||
allow vendor_qcc_app vendor_qcc_data_file:dir create_dir_perms;
|
||||
allow vendor_qcc_app vendor_qcc_data_file:file create_file_perms;
|
||||
|
||||
# allow access to socket
|
||||
unix_socket_connect(vendor_qcc_app, vendor_dpmtcm, vendor_dpmd)
|
||||
|
||||
# allow access to mediadrmserver for qdmastats/wvstats
|
||||
allow vendor_qcc_app mediadrmserver_service:service_manager find;
|
||||
|
||||
# allow vendor_qcc_app to access system_app_data_file
|
||||
# necessary for read and write /data/data subdirectory.
|
||||
allow vendor_qcc_app system_app_data_file:dir create_dir_perms;
|
||||
allow vendor_qcc_app system_app_data_file:file create_file_perms;
|
||||
|
||||
# allow cgroup access
|
||||
allow vendor_qcc_app cgroup:file rw_file_perms;
|
||||
|
||||
#allow mediametrics_service
|
||||
allow vendor_qcc_app mediametrics_service:service_manager find;
|
||||
|
||||
# Allow read-write permissions to qdma sockets under vendor_qcc_app_socket.
|
||||
allow vendor_qcc_app vendor_qcc_app_socket:dir rw_dir_perms;
|
||||
allow vendor_qcc_app vendor_qcc_app_socket:sock_file create_file_perms;
|
||||
57
generic/prebuilts/api/31.0/private/qcc_lmtp_app.te
Normal file
57
generic/prebuilts/api/31.0/private/qcc_lmtp_app.te
Normal file
@@ -0,0 +1,57 @@
|
||||
# Copyright (c) 2017-2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_qcc_lmtp_app, domain, coredomain;
|
||||
userdebug_or_eng(`
|
||||
app_domain(vendor_qcc_lmtp_app)
|
||||
net_domain(vendor_qcc_lmtp_app)
|
||||
binder_use(vendor_qcc_lmtp_app)
|
||||
|
||||
allow vendor_qcc_lmtp_app {activity_service}:service_manager find;
|
||||
|
||||
allow vendor_qcc_lmtp_app location_service:service_manager find;
|
||||
|
||||
# for vendor_perf_service
|
||||
allow vendor_qcc_lmtp_app vendor_perf_service:service_manager find;
|
||||
|
||||
# allow access to socket
|
||||
unix_socket_connect(vendor_qcc_lmtp_app, vendor_dpmtcm, vendor_dpmd)
|
||||
|
||||
# allow access to qcc dropbox
|
||||
allow vendor_qcc_lmtp_app vendor_qcc_data_file:dir create_dir_perms;
|
||||
allow vendor_qcc_lmtp_app vendor_qcc_data_file:file create_file_perms;
|
||||
|
||||
# allow vendor_qcc_lmtp_app to access system_app_data_file
|
||||
# necessary for read and write /data/data subdirectory
|
||||
allow vendor_qcc_lmtp_app system_app_data_file:dir create_dir_perms;
|
||||
allow vendor_qcc_lmtp_app system_app_data_file:file create_file_perms;
|
||||
|
||||
# Allow read-write permissions to qdma sockets under vendor_qcc_app_socket.
|
||||
unix_socket_connect(vendor_qcc_lmtp_app, vendor_qcc_app, vendor_qcc_app)
|
||||
allow vendor_qcc_lmtp_app vendor_qcc_app_socket:dir rw_dir_perms;
|
||||
allow vendor_qcc_lmtp_app vendor_qcc_app_socket:sock_file create_file_perms;
|
||||
')
|
||||
28
generic/prebuilts/api/31.0/private/qcc_trd.te
Normal file
28
generic/prebuilts/api/31.0/private/qcc_trd.te
Normal file
@@ -0,0 +1,28 @@
|
||||
# Copyright (c) 2020 The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
hal_client_domain(vendor_qcc_trd, vendor_qccsyshal);
|
||||
47
generic/prebuilts/api/31.0/private/qcc_utils_app.te
Normal file
47
generic/prebuilts/api/31.0/private/qcc_utils_app.te
Normal file
@@ -0,0 +1,47 @@
|
||||
# Copyright (c) 2017-2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
app_domain(vendor_qcc_utils_app)
|
||||
net_domain(vendor_qcc_utils_app)
|
||||
binder_use(vendor_qcc_utils_app)
|
||||
|
||||
allow vendor_qcc_utils_app { app_api_service radio_service }:service_manager find;
|
||||
|
||||
# allow access to qcc dropbox
|
||||
allow vendor_qcc_utils_app vendor_qcc_data_file:dir create_dir_perms;
|
||||
allow vendor_qcc_utils_app vendor_qcc_data_file:file create_file_perms;
|
||||
|
||||
# allow vendor_qcc_utils_app to access system_app_data_file
|
||||
# necessary for read and write /data/data subdirectory
|
||||
allow vendor_qcc_utils_app system_app_data_file:dir create_dir_perms;
|
||||
allow vendor_qcc_utils_app system_app_data_file:file create_file_perms;
|
||||
|
||||
# allow cgroup access
|
||||
allow vendor_qcc_utils_app cgroup:file rw_file_perms;
|
||||
|
||||
# for aws iot mqtt
|
||||
allow vendor_qcc_utils_app self: udp_socket create_socket_perms_no_ioctl;
|
||||
37
generic/prebuilts/api/31.0/private/qdtservice.te
Normal file
37
generic/prebuilts/api/31.0/private/qdtservice.te
Normal file
@@ -0,0 +1,37 @@
|
||||
# Copyright (c) 2018, The Linux Foundation. All rights reserved.
|
||||
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_qdtservice_exec, exec_type, system_file_type, file_type;
|
||||
type vendor_qdtservice, domain, coredomain;
|
||||
|
||||
init_daemon_domain(vendor_qdtservice)
|
||||
|
||||
add_service(vendor_qdtservice, vendor_qdt_service);
|
||||
binder_use(vendor_qdtservice);
|
||||
binder_service(vendor_qdtservice);
|
||||
|
||||
hal_client_domain(vendor_qdtservice, vendor_hal_perf)
|
||||
36
generic/prebuilts/api/31.0/private/qspmsvc.te
Normal file
36
generic/prebuilts/api/31.0/private/qspmsvc.te
Normal file
@@ -0,0 +1,36 @@
|
||||
# Copyright (c) 2019-2020, The Linux Foundation. All rights reserved.
|
||||
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
typeattribute vendor_qspmsvc coredomain;
|
||||
type vendor_qspmsvc_exec, exec_type, system_file_type, file_type;
|
||||
|
||||
init_daemon_domain(vendor_qspmsvc)
|
||||
add_service(vendor_qspmsvc, vendor_qspmsvc_service);
|
||||
binder_use(vendor_qspmsvc);
|
||||
binder_call(vendor_qspmsvc, system_server);
|
||||
binder_service(vendor_qspmsvc);
|
||||
hal_client_domain(vendor_qspmsvc, hal_thermal)
|
||||
44
generic/prebuilts/api/31.0/private/qtelephony.te
Normal file
44
generic/prebuilts/api/31.0/private/qtelephony.te
Normal file
@@ -0,0 +1,44 @@
|
||||
# Copyright (c) 2017-2018, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
# qti telephony apps, such as AtFwd and FastDormancy
|
||||
typeattribute vendor_qtelephony coredomain;
|
||||
|
||||
app_domain(vendor_qtelephony)
|
||||
|
||||
hwbinder_use(vendor_qtelephony);
|
||||
get_prop(vendor_qtelephony, hwservicemanager_prop);
|
||||
add_hwservice(vendor_qtelephony, vendor_hal_atfwd_hwservice);
|
||||
|
||||
userdebug_or_eng(`
|
||||
hal_client_domain( vendor_qtelephony, vendor_hal_diaghal)
|
||||
')
|
||||
|
||||
allow vendor_qtelephony { cameraserver_service mediaextractor_service mediaserver_service mediametrics_service radio_service drmserver_service audioserver_service}:service_manager find;
|
||||
allow vendor_qtelephony system_api_service:service_manager find;
|
||||
allow vendor_qtelephony app_api_service:service_manager find;
|
||||
hal_client_domain(vendor_qtelephony, hal_telephony)
|
||||
100
generic/prebuilts/api/31.0/private/qti-testscripts.te
Normal file
100
generic/prebuilts/api/31.0/private/qti-testscripts.te
Normal file
@@ -0,0 +1,100 @@
|
||||
# Copyright (c) 2015,2017 The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
#as the exec is defined in file_context it is hitting build
|
||||
# error in user build so moving out of the macro
|
||||
type qti-testscripts_exec, system_file_type, exec_type, file_type;
|
||||
|
||||
userdebug_or_eng(`
|
||||
typeattribute qti-testscripts coredomain;
|
||||
permissive qti-testscripts;
|
||||
init_daemon_domain(qti-testscripts)
|
||||
|
||||
#this is shell scripts and need /system/bin/sh
|
||||
allow qti-testscripts shell_exec:file rx_file_perms;
|
||||
#super_user - start
|
||||
# Add qti-testscripts to various domains
|
||||
net_domain(qti-testscripts)
|
||||
|
||||
dontaudit qti-testscripts self:capability_class_set *;
|
||||
dontaudit qti-testscripts kernel:security *;
|
||||
dontaudit qti-testscripts kernel:system *;
|
||||
dontaudit qti-testscripts self:memprotect *;
|
||||
dontaudit qti-testscripts domain:process *;
|
||||
dontaudit qti-testscripts domain:fd *;
|
||||
dontaudit qti-testscripts domain:dir *;
|
||||
dontaudit qti-testscripts domain:lnk_file *;
|
||||
dontaudit qti-testscripts domain:{ fifo_file file } *;
|
||||
dontaudit qti-testscripts domain:socket_class_set *;
|
||||
dontaudit qti-testscripts domain:ipc_class_set *;
|
||||
dontaudit qti-testscripts domain:key *;
|
||||
dontaudit qti-testscripts fs_type:filesystem *;
|
||||
dontaudit qti-testscripts {fs_type dev_type file_type}:dir_file_class_set *;
|
||||
dontaudit qti-testscripts node_type:node *;
|
||||
dontaudit qti-testscripts node_type:{ tcp_socket udp_socket rawip_socket } *;
|
||||
dontaudit qti-testscripts netif_type:netif *;
|
||||
dontaudit qti-testscripts port_type:socket_class_set *;
|
||||
dontaudit qti-testscripts port_type:{ tcp_socket dccp_socket } *;
|
||||
dontaudit qti-testscripts domain:peer *;
|
||||
dontaudit qti-testscripts domain:binder *;
|
||||
dontaudit qti-testscripts property_type:property_service *;
|
||||
dontaudit qti-testscripts property_type:file *;
|
||||
dontaudit qti-testscripts service_manager_type:service_manager *;
|
||||
dontaudit qti-testscripts keystore:keystore_key *;
|
||||
# dontaudit qti-testscripts domain:debuggerd *;
|
||||
dontaudit qti-testscripts domain:drmservice *;
|
||||
dontaudit qti-testscripts unlabeled:filesystem *;
|
||||
#super_user - end
|
||||
|
||||
#Added below rule in same file to keep all debug policies
|
||||
#under one common file.
|
||||
|
||||
# All domains can read proc enrty of qti-testscripts
|
||||
# r_dir_file(domain, qti-testscripts)
|
||||
# r_dir_file(qti-testscripts, domain)
|
||||
|
||||
# allow adbd qti-testscripts:process dyntransition;
|
||||
#allow { domain -mediaextractor -mediacodec } qti-testscripts:unix_stream_socket connectto;
|
||||
allow domain qti-testscripts:fd use;
|
||||
allow { domain -app_zygote -mediaextractor -hal_omx_server -hal_configstore_server } qti-testscripts:unix_stream_socket { getattr getopt read write shutdown };
|
||||
# binder_call({ domain -init -netd }, qti-testscripts)
|
||||
allow domain qti-testscripts:fifo_file { write getattr };
|
||||
allow domain qti-testscripts:process sigchld;
|
||||
binder_use(qti-testscripts)
|
||||
allow platform_app qti-testscripts:unix_stream_socket { read write connectto};
|
||||
allow system_app qti-testscripts:unix_stream_socket { read write connectto};
|
||||
allow system_server qti-testscripts:binder { transfer call };
|
||||
allow untrusted_app_25 qti-testscripts:binder { transfer call };
|
||||
allow priv_app qti-testscripts:binder { transfer call };
|
||||
allow surfaceflinger qti-testscripts:binder { transfer call };
|
||||
allow system_server qti-testscripts:fifo_file read;
|
||||
binder_call(platform_app, qti-testscripts)
|
||||
binder_call(system_app, qti-testscripts)
|
||||
|
||||
# allow lmkd to kill tasks with positive oom_score_adj under memory pressure
|
||||
allow lmkd qti-testscripts:process { setsched sigkill };
|
||||
')
|
||||
94
generic/prebuilts/api/31.0/private/qvrd.te
Normal file
94
generic/prebuilts/api/31.0/private/qvrd.te
Normal file
@@ -0,0 +1,94 @@
|
||||
# Copyright (c) 2017,2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
typeattribute vendor_qvrd coredomain;
|
||||
typeattribute vendor_qvrd mlstrustedsubject;
|
||||
type vendor_qvrd_exec, system_file_type, exec_type, file_type;
|
||||
|
||||
init_daemon_domain(vendor_qvrd)
|
||||
|
||||
#
|
||||
# General
|
||||
#
|
||||
|
||||
binder_call(vendor_qvrd, system_server);
|
||||
|
||||
# Allow interracting with vendor_qvrd directory
|
||||
allow vendor_qvrd vendor_qvrd_data_file:dir create_dir_perms;
|
||||
allow vendor_qvrd vendor_qvrd_data_file:file create_file_perms;
|
||||
|
||||
#allow binder use for checking permissions
|
||||
binder_use(vendor_qvrd)
|
||||
allow vendor_qvrd permission_service:service_manager find;
|
||||
|
||||
#Allow hardware binder use
|
||||
hwbinder_use(vendor_qvrd)
|
||||
get_prop(vendor_qvrd, hwservicemanager_prop)
|
||||
|
||||
# Allow access to our socket
|
||||
allow vendor_qvrd vendor_qvrd_socket:sock_file rw_file_perms;
|
||||
allow vendor_qvrd vendor_qvrd_controller_socket:sock_file rw_file_perms;
|
||||
|
||||
#
|
||||
# Sensors
|
||||
#
|
||||
|
||||
|
||||
# Allow access to sensor1 API
|
||||
allow vendor_qvrd self:socket create_socket_perms_no_ioctl;
|
||||
|
||||
#
|
||||
# Display
|
||||
#
|
||||
|
||||
# Allow access to /dev/graphics/fb0 for configuring vsync interrupts
|
||||
allow vendor_qvrd graphics_device:dir r_dir_perms;
|
||||
allow vendor_qvrd graphics_device:chr_file rw_file_perms;
|
||||
|
||||
#
|
||||
# Graphics
|
||||
#
|
||||
|
||||
#Allow hal graphics mapper permissions
|
||||
hal_client_domain(vendor_qvrd, hal_graphics_composer);
|
||||
|
||||
#Allow hal graphics allocator permissions
|
||||
hal_client_domain(vendor_qvrd, hal_graphics_allocator);
|
||||
|
||||
#
|
||||
# Scheduler
|
||||
#
|
||||
|
||||
allow vendor_qvrd self:capability { sys_nice };
|
||||
userdebug_or_eng(`
|
||||
allow vendor_qvrd su:process setsched;
|
||||
')
|
||||
allow vendor_qvrd appdomain:process setsched;
|
||||
|
||||
# whitelisting ioctlcmd c302
|
||||
allowxperm vendor_qvrd self:socket ioctl msm_sock_ipc_ioctls_system;
|
||||
allow vendor_qvrd self:socket ioctl;
|
||||
33
generic/prebuilts/api/31.0/private/radio.te
Normal file
33
generic/prebuilts/api/31.0/private/radio.te
Normal file
@@ -0,0 +1,33 @@
|
||||
# Copyright (c) 2018, 2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
hwbinder_use(radio)
|
||||
allow radio mediaextractor_service:service_manager find;
|
||||
|
||||
userdebug_or_eng(`
|
||||
unix_socket_send(radio,vendor_seempdw, vendor_seempd)
|
||||
')
|
||||
62
generic/prebuilts/api/31.0/private/seapp_contexts
Normal file
62
generic/prebuilts/api/31.0/private/seapp_contexts
Normal file
@@ -0,0 +1,62 @@
|
||||
# Copyright (c) 2019-2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
#Add new domain for DataServices
|
||||
# Needed for CNEService , uceShimService and other connectivity services
|
||||
user=radio seinfo=platform name=.dataservices domain=vendor_dataservice_app type=radio_data_file
|
||||
|
||||
# AtFwd app
|
||||
user=_app seinfo=platform name=com.qualcomm.telephony domain=vendor_qtelephony type=app_data_file levelFrom=all
|
||||
|
||||
#Add new domain for ims app
|
||||
user=_app seinfo=platform name=org.codeaurora.ims isPrivApp=true domain=vendor_qtelephony type=app_data_file levelFrom=all
|
||||
|
||||
#Add DeviceInfoHidlClient to vendor_qtelephony
|
||||
user=_app seinfo=platform name=com.qualcomm.qti.devicestatisticsservice domain=vendor_qtelephony type=app_data_file levelFrom=all
|
||||
|
||||
# QtiTelephonyService app
|
||||
user=_app seinfo=platform name=com.qualcomm.qti.telephonyservice domain=vendor_qtelephony type=app_data_file levelFrom=all
|
||||
|
||||
#Add new domain for qti value added Location apps
|
||||
user=_app seinfo=platform name=com.qualcomm.location.XT isPrivApp=true domain=vendor_location_app type=app_data_file
|
||||
user=_app seinfo=platform name=com.qualcomm.location.XT.setup isPrivApp=true domain=vendor_location_app type=app_data_file
|
||||
user=_app seinfo=platform name=com.qualcomm.location isPrivApp=true domain=vendor_location_app type=app_data_file
|
||||
user=_app seinfo=platform name=com.qualcomm.wfd.service:wfd_service domain=vendor_wfd_app type=app_data_file levelfrom=all
|
||||
user=_app seinfo=platform name=com.qualcomm.wfd.client domain=vendor_wfd_app type=app_data_file levelfrom=all
|
||||
user=_app seinfo=platform name=com.qualcomm.qti.ssmeditor domain=vendor_qconfig_app type=app_data_file levelfrom=all
|
||||
|
||||
#Add new domain for QCC
|
||||
user=system seinfo=platform name=com.qualcomm.qti.qdma isPrivApp=true domain=vendor_qcc_app type=system_app_data_file
|
||||
#Add new domain for QCCLMTP
|
||||
user=system seinfo=platform name=com.qualcomm.qti.qcclmtp isPrivApp=true domain=vendor_qcc_lmtp_app type=system_app_data_file
|
||||
#Add new domain for QCC-Utils
|
||||
user=system seinfo=platform name=com.qualcomm.qti.qdmautils isPrivApp=true domain=vendor_qcc_utils_app type=system_app_data_file
|
||||
# Add new domain for FM app
|
||||
user=_app seinfo=platform name=com.caf.fmradio domain=vendor_fm_app type=app_data_file levelFrom=all
|
||||
|
||||
#Add new domain for secure camera service app
|
||||
user=_app seinfo=platform name=com.qualcomm.qti.seccamservice:remote domain=vendor_seccam_app type=app_data_file
|
||||
38
generic/prebuilts/api/31.0/private/seccam_app.te
Executable file
38
generic/prebuilts/api/31.0/private/seccam_app.te
Executable file
@@ -0,0 +1,38 @@
|
||||
# Copyright (c) 2019, The Linux Foundation. All rights reserved.
|
||||
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_seccam_app, domain;
|
||||
app_domain(vendor_seccam_app)
|
||||
net_domain(vendor_seccam_app)
|
||||
|
||||
hal_client_domain(vendor_seccam_app, vendor_hal_qteeconnector);
|
||||
|
||||
allow vendor_seccam_app app_data_file:dir create_dir_perms;
|
||||
allow vendor_seccam_app app_data_file:file create_file_perms;
|
||||
allow vendor_seccam_app { activity_service app_api_service } :service_manager find;
|
||||
allow vendor_seccam_app self:qipcrtr_socket create_socket_perms_no_ioctl;
|
||||
typeattribute vendor_seccam_app hal_graphics_composer_client;
|
||||
46
generic/prebuilts/api/31.0/private/seempd.te
Normal file
46
generic/prebuilts/api/31.0/private/seempd.te
Normal file
@@ -0,0 +1,46 @@
|
||||
# Copyright (c) 2017, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
typeattribute vendor_seempd coredomain;
|
||||
typeattribute vendor_seempd mlstrustedsubject;
|
||||
type vendor_seempd_exec, exec_type, system_file_type, file_type;
|
||||
|
||||
init_daemon_domain(vendor_seempd)
|
||||
|
||||
binder_use(vendor_seempd)
|
||||
binder_call(vendor_seempd, system_server)
|
||||
binder_call(vendor_seempd, appdomain)
|
||||
|
||||
allow vendor_seempd vendor_MinkBinderSvc:service_manager { find };
|
||||
|
||||
add_service(vendor_seempd, vendor_seemp_service)
|
||||
|
||||
allow vendor_seempd self:binder call;
|
||||
allow vendor_seempd ion_device:chr_file r_file_perms;
|
||||
|
||||
#Allow search access in seemp_data_file
|
||||
allow vendor_seempd vendor_seemp_data_file:dir search;
|
||||
40
generic/prebuilts/api/31.0/private/service.te
Normal file
40
generic/prebuilts/api/31.0/private/service.te
Normal file
@@ -0,0 +1,40 @@
|
||||
# Copyright (c) 2018-2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
type vendor_cne_service, service_manager_type;
|
||||
type vendor_seemp_service, service_manager_type;
|
||||
type vendor_dpmservice, service_manager_type;
|
||||
type vendor_MinkBinderSvc, app_api_service, service_manager_type;
|
||||
type vendor_perf_service, app_api_service, service_manager_type;
|
||||
type vendor_qdt_service, app_api_service, service_manager_type;
|
||||
type vendor_izat_service, app_api_service, system_api_service, service_manager_type;
|
||||
type vendor_color_service, service_manager_type;
|
||||
type vendor_wfdservice_service, service_manager_type;
|
||||
type vendor_wigigp2p_service, app_api_service, system_server_service, service_manager_type;
|
||||
type vendor_wigig_service, app_api_service, system_server_service, service_manager_type;
|
||||
type vendor_vps_service, app_api_service, service_manager_type;
|
||||
type vendor_qspmsvc_service, app_api_service, service_manager_type;
|
||||
|
||||
46
generic/prebuilts/api/31.0/private/service_contexts
Normal file
46
generic/prebuilts/api/31.0/private/service_contexts
Normal file
@@ -0,0 +1,46 @@
|
||||
# Copyright (c) 2018-2019, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
cneservice u:object_r:vendor_cne_service:s0
|
||||
com.qualcomm.qti.ustaservice.USTAServiceImpl u:object_r:vendor_usta_app_service:s0
|
||||
dpmservice u:object_r:vendor_dpmservice:s0
|
||||
MinkBinderSvc u:object_r:vendor_MinkBinderSvc:s0
|
||||
vendor.perfservice u:object_r:vendor_perf_service:s0
|
||||
vendor.qdtservice u:object_r:vendor_qdt_service:s0
|
||||
sms-sec u:object_r:radio_service:s0
|
||||
extphone u:object_r:radio_service:s0
|
||||
qti.radio.extphone u:object_r:radio_service:s0
|
||||
com.qualcomm.location.izat.IzatService u:object_r:vendor_izat_service:s0
|
||||
qti.security.seempspa u:object_r:vendor_seemp_service:s0
|
||||
vendor.audio.vrservice u:object_r:audioserver_service:s0
|
||||
com.qti.snapdragon.sdk.display.IColorService u:object_r:vendor_color_service:s0
|
||||
wfdservice u:object_r:vendor_wfdservice_service:s0
|
||||
wigigp2p u:object_r:vendor_wigigp2p_service:s0
|
||||
wigig u:object_r:vendor_wigig_service:s0
|
||||
display.smomoservice u:object_r:surfaceflinger_service:s0
|
||||
vendor.vpsservice u:object_r:vendor_vps_service:s0
|
||||
vendor.qspmsvc u:object_r:vendor_qspmsvc_service:s0
|
||||
|
||||
50
generic/prebuilts/api/31.0/private/sigma-hal.te
Normal file
50
generic/prebuilts/api/31.0/private/sigma-hal.te
Normal file
@@ -0,0 +1,50 @@
|
||||
# Copyright (c) 2019 The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_sigmahal_qti, domain, coredomain;
|
||||
type vendor_sigmahal_qti_exec, system_file_type , exec_type, file_type;
|
||||
|
||||
hal_server_domain(vendor_sigmahal_qti,vendor_sigmahal);
|
||||
hal_attribute_hwservice(vendor_sigmahal, vendor_sigmahal_hwservice);
|
||||
|
||||
#Allow for transition from init domain to vendor_sigmahal_qti
|
||||
init_daemon_domain(vendor_sigmahal_qti);
|
||||
|
||||
#Allow the interaction with servicemanager
|
||||
binder_use(vendor_sigmahal_qti)
|
||||
|
||||
#Allow the interaction with wfdservice
|
||||
binder_call(vendor_sigmahal_qti,vendor_wfdservice);
|
||||
|
||||
#Allow access to vendor_wfdservice_service,audioserver_service,surfaceflinger_service to interact with vendor_sigmahal_qti
|
||||
allow vendor_sigmahal_qti {vendor_wfdservice_service audioserver_service surfaceflinger_service}:service_manager find;
|
||||
|
||||
#Allow vendor_sigmahal_qti to interact with audio_server
|
||||
binder_call(vendor_sigmahal_qti,audioserver);
|
||||
|
||||
#Allow vendor_sigmahal_qti to interact with surface flinger
|
||||
binder_call(vendor_sigmahal_qti,surfaceflinger);
|
||||
28
generic/prebuilts/api/31.0/private/surfaceflinger.te
Normal file
28
generic/prebuilts/api/31.0/private/surfaceflinger.te
Normal file
@@ -0,0 +1,28 @@
|
||||
# Copyright (c) 2018, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
binder_call(surfaceflinger, vendor_wfdservice);
|
||||
47
generic/prebuilts/api/31.0/private/system_app.te
Normal file
47
generic/prebuilts/api/31.0/private/system_app.te
Normal file
@@ -0,0 +1,47 @@
|
||||
# Copyright (c) 2015, 2017, 2019-2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
# access to seemp folder
|
||||
allow system_app vendor_seemp_data_file:dir r_dir_perms;
|
||||
allow system_app vendor_seemp_data_file:{ file fifo_file } rw_file_perms;
|
||||
binder_call(system_app, vendor_seempd)
|
||||
|
||||
allow system_app vendor_dpmtcm_socket:sock_file w_file_perms;
|
||||
allow system_app vendor_dpmd:unix_stream_socket connectto;
|
||||
allow system_app vendor_color_service:service_manager add;
|
||||
get_prop(system_app, bluetooth_prop);
|
||||
# allow system_app to interact with smcinvoke daemon
|
||||
#binder_call(system_app, smcinvoke_daemon)
|
||||
|
||||
# allow system_app access to Workload Classifier Property
|
||||
set_prop(system_app, vendor_wlc_prop);
|
||||
|
||||
# allow system_app access to wigig Property
|
||||
get_prop(system_app, vendor_wigig_core_prop);
|
||||
|
||||
#allow system_app to access faceauth
|
||||
hal_client_domain(system_app, hal_face)
|
||||
67
generic/prebuilts/api/31.0/private/system_server.te
Normal file
67
generic/prebuilts/api/31.0/private/system_server.te
Normal file
@@ -0,0 +1,67 @@
|
||||
# Copyright (c) 2015,2017,2019 The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED"AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
add_service(system_server, vendor_izat_service)
|
||||
|
||||
# Ant ipc
|
||||
hal_client_domain(system_server,hal_bluetooth);
|
||||
|
||||
allow system_server vendor_seempdw_socket:sock_file write;
|
||||
|
||||
binder_call(system_server, vendor_seempd)
|
||||
unix_socket_send(system_server, vendor_seempdw, vendor_seempd)
|
||||
|
||||
unix_socket_connect(system_server, vendor_dpmd, vendor_dpmd);
|
||||
allow system_server { vendor_dpmd_socket vendor_dpmtcm_socket }:sock_file w_file_perms;
|
||||
|
||||
allow system_server vendor_dpmd_data_file:dir create_dir_perms;
|
||||
allow system_server vendor_dpmd_data_file:file create_file_perms;
|
||||
|
||||
#Allow system_server to add and find perf service
|
||||
#add_service(system_server, vendor_perf_service);
|
||||
allow system_server vendor_perf_service:service_manager find;
|
||||
|
||||
#Allow system_server to add and find vps service
|
||||
allow system_server vendor_vps_service:service_manager find;
|
||||
|
||||
binder_call(system_server,vendor_qvrd);
|
||||
|
||||
#Allow for access to WFD specific debug properties
|
||||
binder_call(system_server, vendor_wfdservice);
|
||||
userdebug_or_eng(`
|
||||
get_prop(system_server, vendor_wfd_sys_debug_prop)
|
||||
')
|
||||
# Allow system server to access fst,wigig system properties
|
||||
set_prop(system_server, vendor_wigig_core_prop)
|
||||
set_prop(system_server, vendor_fst_prop)
|
||||
|
||||
# Allow system server to access for dpm
|
||||
get_prop(system_server, vendor_persist_dpm_prop)
|
||||
|
||||
#Allow system_server to add and find qspmsvc service
|
||||
allow system_server vendor_qspmsvc_service:service_manager find;
|
||||
|
||||
35
generic/prebuilts/api/31.0/private/te_macros
Normal file
35
generic/prebuilts/api/31.0/private/te_macros
Normal file
@@ -0,0 +1,35 @@
|
||||
# Copyright (c) 2017, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
#####################################
|
||||
# vendor_dpmd_socket_perm(clientdomain)
|
||||
# allow vendor_dpmd to use inet socket created by app.
|
||||
define(`vendor_dpmd_socket_perm', `
|
||||
allow vendor_dpmd $1:fd use;
|
||||
allow vendor_dpmd $1:tcp_socket rw_socket_perms;
|
||||
')
|
||||
#####################################
|
||||
36
generic/prebuilts/api/31.0/private/untrusted_app.te
Normal file
36
generic/prebuilts/api/31.0/private/untrusted_app.te
Normal file
@@ -0,0 +1,36 @@
|
||||
# Copyright (c) 2015, 2017, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
unix_socket_connect(untrusted_app,vendor_dpmtcm, vendor_dpmd);
|
||||
allow untrusted_app vendor_dpmtcm_socket:sock_file w_file_perms;
|
||||
allow untrusted_app vendor_dpmd:unix_stream_socket connectto;
|
||||
userdebug_or_eng(`
|
||||
r_dir_file(untrusted_app, vendor_seemp_data_file)
|
||||
allow untrusted_app vendor_seemp_data_file: file w_file_perms;
|
||||
')
|
||||
unix_socket_connect(untrusted_app, vendor_qvrd, vendor_qvrd);
|
||||
allow untrusted_app vendor_qvrd:fd use;
|
||||
30
generic/prebuilts/api/31.0/private/untrusted_app_27.te
Normal file
30
generic/prebuilts/api/31.0/private/untrusted_app_27.te
Normal file
@@ -0,0 +1,30 @@
|
||||
# Copyright (c) 2018, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
unix_socket_connect(untrusted_app_27,vendor_dpmtcm, vendor_dpmd);
|
||||
allow untrusted_app_27 vendor_dpmtcm_socket:sock_file w_file_perms;
|
||||
allow untrusted_app_27 vendor_dpmd:unix_stream_socket connectto;
|
||||
30
generic/prebuilts/api/31.0/private/untrusted_app_all.te
Normal file
30
generic/prebuilts/api/31.0/private/untrusted_app_all.te
Normal file
@@ -0,0 +1,30 @@
|
||||
# Copyright (c) 2019, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
unix_socket_connect(untrusted_app_all, vendor_dpmtcm, vendor_dpmd)
|
||||
unix_socket_connect(untrusted_app_all, vendor_qvrd, vendor_qvrd)
|
||||
allow untrusted_app_all vendor_qvrd:fd use;
|
||||
31
generic/prebuilts/api/31.0/private/vendor_init.te
Normal file
31
generic/prebuilts/api/31.0/private/vendor_init.te
Normal file
@@ -0,0 +1,31 @@
|
||||
# Copyright (c) 2019, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
# QCV:vendor_init settable for vendor_exported_system_prop
|
||||
set_prop(vendor_init, vendor_exported_system_prop)
|
||||
# QCV:vendor_init settable for vendor_exported_odm_prop
|
||||
set_prop(vendor_init, vendor_exported_odm_prop)
|
||||
35
generic/prebuilts/api/31.0/private/vendor_qconfig_app.te
Normal file
35
generic/prebuilts/api/31.0/private/vendor_qconfig_app.te
Normal file
@@ -0,0 +1,35 @@
|
||||
# Copyright (c) 2020, The Linux Foundation. All rights reserved.
|
||||
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_qconfig_app, domain;
|
||||
typeattribute vendor_qconfig_app coredomain;
|
||||
|
||||
app_domain(vendor_qconfig_app)
|
||||
binder_use(vendor_qconfig_app)
|
||||
|
||||
allow vendor_qconfig_app app_api_service:service_manager find;
|
||||
hal_client_domain(vendor_qconfig_app, vendor_hal_qconfig)
|
||||
45
generic/prebuilts/api/31.0/private/vpsservice.te
Executable file
45
generic/prebuilts/api/31.0/private/vpsservice.te
Executable file
@@ -0,0 +1,45 @@
|
||||
# Copyright (c) 2019, The Linux Foundation. All rights reserved.
|
||||
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
typeattribute vendor_vpsservice coredomain;
|
||||
type vendor_vpsservice_exec, system_file_type, exec_type, file_type;
|
||||
|
||||
init_daemon_domain(vendor_vpsservice)
|
||||
|
||||
add_service(vendor_vpsservice, vendor_vps_service)
|
||||
binder_use(vendor_vpsservice);
|
||||
binder_call(vendor_vpsservice, system_server);
|
||||
binder_service(vendor_vpsservice);
|
||||
|
||||
hal_client_domain(vendor_vpsservice, hal_graphics_composer)
|
||||
hal_client_domain(vendor_vpsservice, hal_graphics_allocator)
|
||||
allow vendor_vpsservice surfaceflinger:binder call;
|
||||
allow vendor_vpsservice surfaceflinger:fd use;
|
||||
allow vendor_vpsservice ion_device:chr_file { open read };
|
||||
allow vendor_vpsservice media_rw_data_file:dir create_dir_perms;
|
||||
allow vendor_vpsservice media_rw_data_file:file create_file_perms;
|
||||
allow vendor_vpsservice gpu_device:chr_file rw_file_perms;
|
||||
59
generic/prebuilts/api/31.0/private/wfd_app.te
Normal file
59
generic/prebuilts/api/31.0/private/wfd_app.te
Normal file
@@ -0,0 +1,59 @@
|
||||
# Copyright (c) 2020 The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
typeattribute vendor_wfd_app coredomain;
|
||||
|
||||
app_domain(vendor_wfd_app)
|
||||
|
||||
net_domain(vendor_wfd_app)
|
||||
|
||||
set_prop(vendor_wfd_app, vendor_wfd_service_prop);
|
||||
userdebug_or_eng(`
|
||||
get_prop(vendor_wfd_app, vendor_wfd_sys_debug_prop);
|
||||
#Access to MM-OSAL debug prop for parser debugging on WFD sink
|
||||
get_prop(vendor_wfd_app, vendor_mm_osal_prop);
|
||||
#Allow access to logmask file in /data/
|
||||
allow vendor_wfd_app system_data_file:file r_file_perms;
|
||||
')
|
||||
binder_call(vendor_wfd_app, vendor_wfdservice)
|
||||
|
||||
# allow access to read video SKU property for WFD sink
|
||||
get_prop(vendor_wfd_app, vendor_sys_video_prop)
|
||||
|
||||
allow vendor_wfd_app {
|
||||
vendor_wfdservice_service
|
||||
audioserver_service
|
||||
mediaserver_service
|
||||
mediadrmserver_service
|
||||
app_api_service
|
||||
vendor_perf_service
|
||||
mediametrics_service
|
||||
}:service_manager find;
|
||||
|
||||
# Access to /data/media for debug dump
|
||||
allow vendor_wfd_app media_rw_data_file:dir create_dir_perms;
|
||||
allow vendor_wfd_app media_rw_data_file:file create_file_perms;
|
||||
74
generic/prebuilts/api/31.0/private/wfdservice.te
Normal file
74
generic/prebuilts/api/31.0/private/wfdservice.te
Normal file
@@ -0,0 +1,74 @@
|
||||
# Copyright (c) 2017, 2019-2020 The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
typeattribute vendor_wfdservice coredomain;
|
||||
type vendor_wfdservice_exec, system_file_type , exec_type, file_type;
|
||||
|
||||
#Allow for transition from init domain to vendor_wfdservice
|
||||
init_daemon_domain(vendor_wfdservice)
|
||||
|
||||
#Inherit base socket permissions from netd domain
|
||||
net_domain(vendor_wfdservice)
|
||||
|
||||
#Allow vendor_wfdservice to use Binder IPC
|
||||
binder_use(vendor_wfdservice)
|
||||
|
||||
#Allow for interaction with Display HAL
|
||||
binder_call(vendor_wfdservice, surfaceflinger)
|
||||
|
||||
#Allow apps to interact with vendor_wfdservice
|
||||
binder_call(vendor_wfdservice, vendor_wfd_app)
|
||||
|
||||
#Allow access to Audio Flinger APIs
|
||||
binder_call(vendor_wfdservice, audioserver)
|
||||
|
||||
#Allow access to Permission Controller in System Server
|
||||
binder_call(vendor_wfdservice, system_server)
|
||||
|
||||
#Allow vendor_wfdservice to be registered with service manager
|
||||
add_service(vendor_wfdservice, vendor_wfdservice_service)
|
||||
|
||||
#Allow access to read mmosal_logmask file in /data partition
|
||||
userdebug_or_eng(`
|
||||
allow vendor_wfdservice system_data_file:file r_file_perms;
|
||||
')
|
||||
|
||||
# Allow access to mediaserver, surfaceflinger and permissionmanager for interaction of vendor_wfdservice
|
||||
allow vendor_wfdservice {audioserver_service permission_service surfaceflinger_service}: service_manager find;
|
||||
|
||||
hal_client_domain(vendor_wfdservice, hal_graphics_allocator);
|
||||
|
||||
hal_client_domain(vendor_wfdservice, hal_graphics_composer);
|
||||
|
||||
#Allow ion device access
|
||||
allow vendor_wfdservice ion_device:chr_file r_file_perms;
|
||||
|
||||
#Allow source to access video UBWC property(for display config)
|
||||
get_prop(vendor_wfdservice, vendor_sys_video_prop)
|
||||
|
||||
#Allow the interaction with vendor_sigmahal_qti
|
||||
binder_call(vendor_wfdservice,vendor_sigmahal_qti);
|
||||
29
generic/prebuilts/api/31.0/private/wificond.te
Normal file
29
generic/prebuilts/api/31.0/private/wificond.te
Normal file
@@ -0,0 +1,29 @@
|
||||
# Copyright (c) 2019, The Linux Foundation. All rights reserved.
|
||||
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
#allow wificond to read FST properties
|
||||
get_prop(wificond, vendor_fst_prop);
|
||||
31
generic/prebuilts/api/31.0/private/zygote.te
Normal file
31
generic/prebuilts/api/31.0/private/zygote.te
Normal file
@@ -0,0 +1,31 @@
|
||||
# Copyright (c) 2018, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED"AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
unix_socket_send(zygote, vendor_seempdw, vendor_seempd)
|
||||
|
||||
get_prop(zygote, vendor_persist_dpm_prop)
|
||||
get_prop(zygote, vendor_sys_video_prop)
|
||||
219
generic/prebuilts/api/31.0/public/attributes
Normal file
219
generic/prebuilts/api/31.0/public/attributes
Normal file
@@ -0,0 +1,219 @@
|
||||
# Copyright (c) 2016-2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
attribute vendor_hal_hbtp;
|
||||
attribute vendor_hal_hbtp_client;
|
||||
attribute vendor_hal_hbtp_server;
|
||||
|
||||
attribute vendor_hal_qdutils_disp;
|
||||
attribute vendor_hal_qdutils_disp_client;
|
||||
attribute vendor_hal_qdutils_disp_server;
|
||||
|
||||
attribute vendor_hal_trustedui;
|
||||
attribute vendor_hal_trustedui_client;
|
||||
attribute vendor_hal_trustedui_server;
|
||||
|
||||
attribute vendor_hal_tui_comm;
|
||||
attribute vendor_hal_tui_comm_client;
|
||||
attribute vendor_hal_tui_comm_server;
|
||||
|
||||
attribute vendor_hal_display_color;
|
||||
attribute vendor_hal_display_color_client;
|
||||
attribute vendor_hal_display_color_server;
|
||||
|
||||
attribute vendor_hal_display_postproc;
|
||||
attribute vendor_hal_display_postproc_client;
|
||||
attribute vendor_hal_display_postproc_server;
|
||||
|
||||
# All types in /mnt/vendor/persist
|
||||
attribute vendor_persist_type;
|
||||
|
||||
attribute vendor_hal_capabilityconfigstore_qti;
|
||||
attribute vendor_hal_capabilityconfigstore_qti_client;
|
||||
attribute vendor_hal_capabilityconfigstore_qti_server;
|
||||
|
||||
attribute vendor_hal_dataconnection_qti;
|
||||
attribute vendor_hal_dataconnection_qti_client;
|
||||
attribute vendor_hal_dataconnection_qti_server;
|
||||
|
||||
attribute vendor_hal_embmssl;
|
||||
attribute vendor_hal_embmssl_client;
|
||||
attribute vendor_hal_embmssl_server;
|
||||
|
||||
attribute vendor_hal_dspmanager;
|
||||
attribute vendor_hal_dspmanager_client;
|
||||
attribute vendor_hal_dspmanager_server;
|
||||
|
||||
attribute vendor_hal_diaghal;
|
||||
attribute vendor_hal_diaghal_client;
|
||||
attribute vendor_hal_diaghal_server;
|
||||
|
||||
attribute vendor_hal_perf;
|
||||
attribute vendor_hal_perf_client;
|
||||
attribute vendor_hal_perf_server;
|
||||
|
||||
attribute vendor_sigmahal;
|
||||
attribute vendor_sigmahal_server;
|
||||
attribute vendor_sigmahal_client;
|
||||
|
||||
attribute vendor_qccsyshal;
|
||||
attribute vendor_qccsyshal_server;
|
||||
attribute vendor_qccsyshal_client;
|
||||
|
||||
attribute vendor_hal_spu;
|
||||
attribute vendor_hal_spu_client;
|
||||
attribute vendor_hal_spu_server;
|
||||
|
||||
attribute vendor_hal_qspmhal;
|
||||
attribute vendor_hal_qspmhal_client;
|
||||
attribute vendor_hal_qspmhal_server;
|
||||
|
||||
attribute vendor_hal_btconfigstore;
|
||||
attribute vendor_hal_btconfigstore_client;
|
||||
attribute vendor_hal_btconfigstore_server;
|
||||
|
||||
attribute vendor_hal_fm;
|
||||
attribute vendor_hal_fm_client;
|
||||
attribute vendor_hal_fm_server;
|
||||
|
||||
attribute vendor_hal_qteeconnector;
|
||||
attribute vendor_hal_qteeconnector_client;
|
||||
attribute vendor_hal_qteeconnector_server;
|
||||
|
||||
attribute vendor_hal_eid;
|
||||
attribute vendor_hal_eid_client;
|
||||
attribute vendor_hal_eid_server;
|
||||
|
||||
attribute vendor_hal_alarm_qti;
|
||||
attribute vendor_hal_alarm_qti_client;
|
||||
attribute vendor_hal_alarm_qti_server;
|
||||
|
||||
attribute vendor_hal_iop;
|
||||
attribute vendor_hal_iop_client;
|
||||
attribute vendor_hal_iop_server;
|
||||
|
||||
attribute vendor_hal_soter;
|
||||
attribute vendor_hal_soter_client;
|
||||
attribute vendor_hal_soter_server;
|
||||
|
||||
attribute vendor_hal_sensorscalibrate_qti;
|
||||
attribute vendor_hal_sensorscalibrate_qti_client;
|
||||
attribute vendor_hal_sensorscalibrate_qti_server;
|
||||
|
||||
attribute vendor_hal_scve;
|
||||
attribute vendor_hal_scve_client;
|
||||
attribute vendor_hal_scve_server;
|
||||
|
||||
attribute vendor_hal_pasrmanager;
|
||||
attribute vendor_hal_pasrmanager_client;
|
||||
attribute vendor_hal_pasrmanager_server;
|
||||
|
||||
attribute vendor_hal_qseecom;
|
||||
attribute vendor_hal_qseecom_client;
|
||||
attribute vendor_hal_qseecom_server;
|
||||
|
||||
attribute vendor_hal_secureprocessor;
|
||||
attribute vendor_hal_secureprocessor_client;
|
||||
attribute vendor_hal_secureprocessor_server;
|
||||
|
||||
attribute vendor_hal_seccam;
|
||||
attribute vendor_hal_seccam_client;
|
||||
attribute vendor_hal_seccam_server;
|
||||
|
||||
attribute vendor_wifidisplayhalservice;
|
||||
attribute vendor_wifidisplayhalservice_client;
|
||||
attribute vendor_wifidisplayhalservice_server;
|
||||
|
||||
attribute vendor_hal_vpp;
|
||||
attribute vendor_hal_vpp_client;
|
||||
attribute vendor_hal_vpp_server;
|
||||
|
||||
attribute vendor_hal_qconfig;
|
||||
attribute vendor_hal_qconfig_client;
|
||||
attribute vendor_hal_qconfig_server;
|
||||
|
||||
attribute vendor_hal_esepowermanager;
|
||||
attribute vendor_hal_esepowermanager_client;
|
||||
attribute vendor_hal_esepowermanager_server;
|
||||
|
||||
attribute vendor_hal_factory_qti;
|
||||
attribute vendor_hal_factory_qti_client;
|
||||
attribute vendor_hal_factory_qti_server;
|
||||
|
||||
attribute vendor_hal_cvp;
|
||||
attribute vendor_hal_cvp_client;
|
||||
attribute vendor_hal_cvp_server;
|
||||
|
||||
attribute vendor_hal_wigig;
|
||||
attribute vendor_hal_wigig_client;
|
||||
attribute vendor_hal_wigig_server;
|
||||
|
||||
attribute vendor_hal_wigig_npt;
|
||||
attribute vendor_hal_wigig_npt_client;
|
||||
attribute vendor_hal_wigig_npt_server;
|
||||
|
||||
attribute vendor_hal_fstman;
|
||||
attribute vendor_hal_fstman_client;
|
||||
attribute vendor_hal_fstman_server;
|
||||
|
||||
attribute vendor_hal_wifilearner;
|
||||
attribute vendor_hal_wifilearner_client;
|
||||
attribute vendor_hal_wifilearner_server;
|
||||
|
||||
attribute vendor_hal_srvctracker;
|
||||
attribute vendor_hal_srvctracker_client;
|
||||
attribute vendor_hal_srvctracker_server;
|
||||
|
||||
attribute vendor_spunvm_file_type;
|
||||
|
||||
attribute vendor_hal_bluetooth_dun;
|
||||
attribute vendor_hal_bluetooth_dun_client;
|
||||
attribute vendor_hal_bluetooth_dun_server;
|
||||
|
||||
attribute vendor_hal_qccvndhal;
|
||||
attribute vendor_hal_qccvndhal_client;
|
||||
attribute vendor_hal_qccvndhal_server;
|
||||
|
||||
attribute vendor_qtiloopback;
|
||||
attribute vendor_qtiloopback_server;
|
||||
attribute vendor_qtiloopback_client;
|
||||
|
||||
attribute vendor_hal_debugutils;
|
||||
attribute vendor_hal_debugutils_client;
|
||||
attribute vendor_hal_debugutils_server;
|
||||
|
||||
attribute vendor_hal_wifimyftm;
|
||||
attribute vendor_hal_wifimyftm_client;
|
||||
attribute vendor_hal_wifimyftm_server;
|
||||
|
||||
attribute vendor_hal_mem_pasrmanager;
|
||||
attribute vendor_hal_mem_pasrmanager_client;
|
||||
attribute vendor_hal_mem_pasrmanager_server;
|
||||
|
||||
attribute vendor_hal_limits;
|
||||
attribute vendor_hal_limits_client;
|
||||
attribute vendor_hal_limits_server;
|
||||
27
generic/prebuilts/api/31.0/public/dataservice_app.te
Normal file
27
generic/prebuilts/api/31.0/public/dataservice_app.te
Normal file
@@ -0,0 +1,27 @@
|
||||
# Copyright (c) 2018, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
type vendor_dataservice_app, domain;
|
||||
28
generic/prebuilts/api/31.0/public/device.te
Normal file
28
generic/prebuilts/api/31.0/public/device.te
Normal file
@@ -0,0 +1,28 @@
|
||||
# Copyright (c) 2018, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED"AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
#type vendor_smcinvoke_device, dev_type;
|
||||
28
generic/prebuilts/api/31.0/public/domain.te
Normal file
28
generic/prebuilts/api/31.0/public/domain.te
Normal file
@@ -0,0 +1,28 @@
|
||||
# Copyright (c) 2017-2018, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_qtelephony, domain;
|
||||
28
generic/prebuilts/api/31.0/public/dpmd.te
Normal file
28
generic/prebuilts/api/31.0/public/dpmd.te
Normal file
@@ -0,0 +1,28 @@
|
||||
# Copyright (c) 2017, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_dpmd,domain;
|
||||
28
generic/prebuilts/api/31.0/public/dun-server.te
Normal file
28
generic/prebuilts/api/31.0/public/dun-server.te
Normal file
@@ -0,0 +1,28 @@
|
||||
# Copyright (c) 2017, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_dun-server, domain;
|
||||
30
generic/prebuilts/api/31.0/public/file.te
Normal file
30
generic/prebuilts/api/31.0/public/file.te
Normal file
@@ -0,0 +1,30 @@
|
||||
# Copyright (c) 2018-2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
type vendor_elabel_data_file, file_type, data_file_type, core_data_file_type;
|
||||
|
||||
type vendor_dpmtcm_socket, file_type, coredomain_socket, mlstrustedobject;
|
||||
type vendor_seempdw_socket, file_type, mlstrustedobject, coredomain_socket;
|
||||
28
generic/prebuilts/api/31.0/public/fm_app.te
Normal file
28
generic/prebuilts/api/31.0/public/fm_app.te
Normal file
@@ -0,0 +1,28 @@
|
||||
# Copyright (c) 2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_fm_app, domain;
|
||||
29
generic/prebuilts/api/31.0/public/hwservice.te
Normal file
29
generic/prebuilts/api/31.0/public/hwservice.te
Normal file
@@ -0,0 +1,29 @@
|
||||
# Copyright (c) 2018, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
type vendor_hal_atfwd_hwservice, coredomain_hwservice, hwservice_manager_type, protected_hwservice;
|
||||
type vendor_sigmahal_hwservice, hwservice_manager_type, protected_hwservice;
|
||||
type vendor_qccsyshal_hwservice, hwservice_manager_type, protected_hwservice, coredomain_hwservice;
|
||||
31
generic/prebuilts/api/31.0/public/location_app.te
Normal file
31
generic/prebuilts/api/31.0/public/location_app.te
Normal file
@@ -0,0 +1,31 @@
|
||||
# Copyright (c) 2019, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
# generic/vendor_location_app.te - sepolicy rules for qti value added location apps
|
||||
# that will be part of system image. Eg: XT app.
|
||||
|
||||
type vendor_location_app, domain;
|
||||
28
generic/prebuilts/api/31.0/public/mmi_sys.te
Executable file
28
generic/prebuilts/api/31.0/public/mmi_sys.te
Executable file
@@ -0,0 +1,28 @@
|
||||
# Copyright (c) 2018, The Linux Foundation. All rights reserved.
|
||||
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_mmi_sys, domain;
|
||||
28
generic/prebuilts/api/31.0/public/perfservice.te
Normal file
28
generic/prebuilts/api/31.0/public/perfservice.te
Normal file
@@ -0,0 +1,28 @@
|
||||
# Copyright (c) 2018, The Linux Foundation. All rights reserved.
|
||||
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_perfservice, domain, coredomain;
|
||||
37
generic/prebuilts/api/31.0/public/property.te
Normal file
37
generic/prebuilts/api/31.0/public/property.te
Normal file
@@ -0,0 +1,37 @@
|
||||
# Copyright (c) 2017, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
system_public_prop(vendor_persist_dpm_prop)
|
||||
system_restricted_prop(vendor_persist_camera_prop)
|
||||
|
||||
# this is vendor defined property and added with prefix vendor
|
||||
# which is going to be working from system
|
||||
system_restricted_prop(vendor_bt_prop)
|
||||
system_public_prop(vendor_sys_video_prop)
|
||||
#mm-parser
|
||||
system_public_prop(vendor_mm_parser_prop)
|
||||
system_restricted_prop(vendor_wlc_prop)
|
||||
28
generic/prebuilts/api/31.0/public/qcc_app.te
Normal file
28
generic/prebuilts/api/31.0/public/qcc_app.te
Normal file
@@ -0,0 +1,28 @@
|
||||
# Copyright (c) 2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_qcc_app, domain, coredomain;
|
||||
28
generic/prebuilts/api/31.0/public/qcc_trd.te
Normal file
28
generic/prebuilts/api/31.0/public/qcc_trd.te
Normal file
@@ -0,0 +1,28 @@
|
||||
# Copyright (c) 2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_qcc_trd, domain;
|
||||
28
generic/prebuilts/api/31.0/public/qcc_utils_app.te
Normal file
28
generic/prebuilts/api/31.0/public/qcc_utils_app.te
Normal file
@@ -0,0 +1,28 @@
|
||||
# Copyright (c) 2017-2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_qcc_utils_app, domain, coredomain;
|
||||
28
generic/prebuilts/api/31.0/public/qspmsvc.te
Normal file
28
generic/prebuilts/api/31.0/public/qspmsvc.te
Normal file
@@ -0,0 +1,28 @@
|
||||
# Copyright (c) 2019-2020, The Linux Foundation. All rights reserved.
|
||||
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_qspmsvc, domain;
|
||||
30
generic/prebuilts/api/31.0/public/qti-testscripts.te
Normal file
30
generic/prebuilts/api/31.0/public/qti-testscripts.te
Normal file
@@ -0,0 +1,30 @@
|
||||
# Copyright (c) 2017, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
userdebug_or_eng(`
|
||||
type qti-testscripts, domain, mlstrustedsubject;
|
||||
')
|
||||
28
generic/prebuilts/api/31.0/public/qvrd.te
Normal file
28
generic/prebuilts/api/31.0/public/qvrd.te
Normal file
@@ -0,0 +1,28 @@
|
||||
# Copyright (c) 2017, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_qvrd, domain;
|
||||
28
generic/prebuilts/api/31.0/public/seempd.te
Normal file
28
generic/prebuilts/api/31.0/public/seempd.te
Normal file
@@ -0,0 +1,28 @@
|
||||
# Copyright (c) 2019, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_seempd, domain;
|
||||
27
generic/prebuilts/api/31.0/public/service.te
Normal file
27
generic/prebuilts/api/31.0/public/service.te
Normal file
@@ -0,0 +1,27 @@
|
||||
# Copyright (c) 2019, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
type vendor_usta_app_service, app_api_service, system_api_service, service_manager_type;
|
||||
28
generic/prebuilts/api/31.0/public/vpsservice.te
Executable file
28
generic/prebuilts/api/31.0/public/vpsservice.te
Executable file
@@ -0,0 +1,28 @@
|
||||
# Copyright (c) 2019, The Linux Foundation. All rights reserved.
|
||||
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_vpsservice, domain, coredomain;
|
||||
28
generic/prebuilts/api/31.0/public/wfd_app.te
Normal file
28
generic/prebuilts/api/31.0/public/wfd_app.te
Normal file
@@ -0,0 +1,28 @@
|
||||
# Copyright (c) 2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_wfd_app, domain;
|
||||
28
generic/prebuilts/api/31.0/public/wfdservice.te
Normal file
28
generic/prebuilts/api/31.0/public/wfdservice.te
Normal file
@@ -0,0 +1,28 @@
|
||||
# Copyright (c) 2017, 2019 The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
type vendor_wfdservice, domain;
|
||||
84
generic/prebuilts/api/31.0/system_ext_pub_versioned.cil
Normal file
84
generic/prebuilts/api/31.0/system_ext_pub_versioned.cil
Normal file
@@ -0,0 +1,84 @@
|
||||
(type vendor_smcinvoke_device)
|
||||
(type vendor_qtelephony)
|
||||
(type vendor_dpmd)
|
||||
(type vendor_dun-server)
|
||||
(type vendor_elabel_data_file)
|
||||
(type vendor_dpmtcm_socket)
|
||||
(type vendor_seempdw_socket)
|
||||
(type vendor_fm_app)
|
||||
(type vendor_hal_atfwd_hwservice)
|
||||
(type vendor_sigmahal_hwservice)
|
||||
(type vendor_qccsyshal_hwservice)
|
||||
(type vendor_location_app)
|
||||
(type vendor_mmi_sys)
|
||||
(type vendor_perfservice)
|
||||
(type vendor_persist_dpm_prop)
|
||||
(type vendor_persist_camera_prop)
|
||||
(type vendor_bt_prop)
|
||||
(type vendor_sys_video_prop)
|
||||
(type vendor_wlc_prop)
|
||||
(type vendor_qcc_app)
|
||||
(type vendor_qcc_trd)
|
||||
(type vendor_qcc_utils_app)
|
||||
(type vendor_qspmsvc)
|
||||
(type qti-testscripts)
|
||||
(type vendor_qvrd)
|
||||
(type vendor_seempd)
|
||||
(type vendor_usta_app_service)
|
||||
(type vendor_vpsservice)
|
||||
(type vendor_wfd_app)
|
||||
(type vendor_wfdservice)
|
||||
(type vendor_sigmahal_qti)
|
||||
(type vendor_dataservice_app)
|
||||
(type vendor_hal_displayconfig_service)
|
||||
(type vendor_hal_telephony_service)
|
||||
(type vendor_mm_parser_prop)
|
||||
(type vendor_persist_tcm_prop)
|
||||
(type vendor_persist_rcs_prop)
|
||||
(type vendor_qvirtmgr)
|
||||
(type vendor_qesdk_service)
|
||||
(type vendor_qcc_authmgr_app)
|
||||
(type vendor_qcc_netstat_app)
|
||||
(type vendor_qcc_lmtp_app)
|
||||
(typeattribute vendor_smcinvoke_device_31_0)
|
||||
(typeattribute vendor_qtelephony_31_0)
|
||||
(typeattribute vendor_dpmd_31_0)
|
||||
(typeattribute vendor_dun-server_31_0)
|
||||
(typeattribute vendor_elabel_data_file_31_0)
|
||||
(typeattribute vendor_dpmtcm_socket_31_0)
|
||||
(typeattribute vendor_seempdw_socket_31_0)
|
||||
(typeattribute vendor_fm_app_31_0)
|
||||
(typeattribute vendor_hal_atfwd_hwservice_31_0)
|
||||
(typeattribute vendor_sigmahal_hwservice_31_0)
|
||||
(typeattribute vendor_qccsyshal_hwservice_31_0)
|
||||
(typeattribute vendor_location_app_31_0)
|
||||
(typeattribute vendor_mmi_sys_31_0)
|
||||
(typeattribute vendor_perfservice_31_0)
|
||||
(typeattribute vendor_persist_dpm_prop_31_0)
|
||||
(typeattribute vendor_persist_camera_prop_31_0)
|
||||
(typeattribute vendor_bt_prop_31_0)
|
||||
(typeattribute vendor_sys_video_prop_31_0)
|
||||
(typeattribute vendor_wlc_prop_31_0)
|
||||
(typeattribute vendor_qcc_app_31_0)
|
||||
(typeattribute vendor_qcc_trd_31_0)
|
||||
(typeattribute vendor_qcc_utils_app_31_0)
|
||||
(typeattribute vendor_qspmsvc_31_0)
|
||||
(typeattribute qti-testscripts_31_0)
|
||||
(typeattribute vendor_qvrd_31_0)
|
||||
(typeattribute vendor_seempd_31_0)
|
||||
(typeattribute vendor_usta_app_service_31_0)
|
||||
(typeattribute vendor_vpsservice_31_0)
|
||||
(typeattribute vendor_wfd_app_31_0)
|
||||
(typeattribute vendor_wfdservice_31_0)
|
||||
(typeattribute vendor_sigmahal_qti_31_0)
|
||||
(typeattribute vendor_dataservice_app_31_0)
|
||||
(typeattribute vendor_hal_displayconfig_service_31_0)
|
||||
(typeattribute vendor_hal_telephony_service_31_0)
|
||||
(typeattribute vendor_mm_parser_prop_31_0)
|
||||
(typeattribute vendor_persist_tcm_prop_31_0)
|
||||
(typeattribute vendor_persist_rcs_prop_31_0)
|
||||
(typeattribute vendor_qvirtmgr_31_0)
|
||||
(typeattribute vendor_qesdk_service_31_0)
|
||||
(typeattribute vendor_qcc_authmgr_app_31_0)
|
||||
(typeattribute vendor_qcc_netstat_app_31_0)
|
||||
(typeattribute vendor_qcc_lmtp_app_31_0)
|
||||
1
generic/prebuilts/api/31.0/vendor_sepolicy.cil
Normal file
1
generic/prebuilts/api/31.0/vendor_sepolicy.cil
Normal file
@@ -0,0 +1 @@
|
||||
;; empty stub
|
||||
82
generic/private/compat/31.0/31.0.cil
Executable file
82
generic/private/compat/31.0/31.0.cil
Executable file
@@ -0,0 +1,82 @@
|
||||
(typeattributeset vendor_persist_camera_prop_31_0 (vendor_persist_camera_prop))
|
||||
(expandtypeattribute (vendor_persist_camera_prop_31_0) true)
|
||||
(typeattributeset vendor_usta_app_service_31_0 (vendor_usta_app_service))
|
||||
(expandtypeattribute (vendor_usta_app_service_31_0) true)
|
||||
(typeattributeset vendor_qvrd_31_0 (vendor_qvrd))
|
||||
(expandtypeattribute (vendor_qvrd_31_0) true)
|
||||
(typeattributeset vendor_qtelephony_31_0 (vendor_qtelephony))
|
||||
(expandtypeattribute (vendor_qtelephony_31_0) true)
|
||||
(typeattributeset vendor_qcc_trd_31_0 (vendor_qcc_trd))
|
||||
(expandtypeattribute (vendor_qcc_trd_31_0) true)
|
||||
(typeattributeset vendor_dataservice_app_31_0 (vendor_dataservice_app))
|
||||
(expandtypeattribute (vendor_dataservice_app_31_0) true)
|
||||
(typeattributeset vendor_seempd_31_0 (vendor_seempd))
|
||||
(expandtypeattribute (vendor_seempd_31_0) true)
|
||||
(typeattributeset vendor_qcc_utils_app_31_0 (vendor_qcc_utils_app))
|
||||
(expandtypeattribute (vendor_qcc_utils_app_31_0) true)
|
||||
(typeattributeset vendor_dpmtcm_socket_31_0 (vendor_dpmtcm_socket))
|
||||
(expandtypeattribute (vendor_dpmtcm_socket_31_0) true)
|
||||
(typeattributeset vendor_sys_video_prop_31_0 (vendor_sys_video_prop))
|
||||
(expandtypeattribute (vendor_sys_video_prop_31_0) true)
|
||||
(typeattributeset vendor_qcc_app_31_0 (vendor_qcc_app))
|
||||
(expandtypeattribute (vendor_qcc_app_31_0) true)
|
||||
(typeattributeset vendor_wfd_app_31_0 (vendor_wfd_app))
|
||||
(expandtypeattribute (vendor_wfd_app_31_0) true)
|
||||
(typeattributeset vendor_bt_prop_31_0 (vendor_bt_prop))
|
||||
(expandtypeattribute (vendor_bt_prop_31_0) true)
|
||||
(typeattributeset vendor_mmi_sys_31_0 (vendor_mmi_sys))
|
||||
(expandtypeattribute (vendor_mmi_sys_31_0) true)
|
||||
(typeattributeset vendor_qspmsvc_31_0 (vendor_qspmsvc))
|
||||
(expandtypeattribute (vendor_qspmsvc_31_0) true)
|
||||
(typeattributeset vendor_dpmd_31_0 (vendor_dpmd))
|
||||
(expandtypeattribute (vendor_dpmd_31_0) true)
|
||||
(typeattributeset vendor_qccsyshal_hwservice_31_0 (vendor_qccsyshal_hwservice))
|
||||
(expandtypeattribute (vendor_qccsyshal_hwservice_31_0) true)
|
||||
(typeattributeset vendor_vpsservice_31_0 (vendor_vpsservice))
|
||||
(expandtypeattribute (vendor_vpsservice_31_0) true)
|
||||
(typeattributeset vendor_wfdservice_31_0 (vendor_wfdservice))
|
||||
(expandtypeattribute (vendor_wfdservice_31_0) true)
|
||||
(typeattributeset vendor_hal_atfwd_hwservice_31_0 (vendor_hal_atfwd_hwservice))
|
||||
(expandtypeattribute (vendor_hal_atfwd_hwservice_31_0) true)
|
||||
(typeattributeset vendor_smcinvoke_device_31_0 (vendor_smcinvoke_device))
|
||||
(expandtypeattribute (vendor_smcinvoke_device_31_0) true)
|
||||
(typeattributeset vendor_persist_dpm_prop_31_0 (vendor_persist_dpm_prop))
|
||||
(expandtypeattribute (vendor_persist_dpm_prop_31_0) true)
|
||||
(typeattributeset vendor_dun-server_31_0 (vendor_dun-server))
|
||||
(expandtypeattribute (vendor_dun-server_31_0) true)
|
||||
(typeattributeset vendor_wlc_prop_31_0 (vendor_wlc_prop))
|
||||
(expandtypeattribute (vendor_wlc_prop_31_0) true)
|
||||
(typeattributeset vendor_elabel_data_file_31_0 (vendor_elabel_data_file))
|
||||
(expandtypeattribute (vendor_elabel_data_file_31_0) true)
|
||||
(typeattributeset vendor_fm_app_31_0 (vendor_fm_app))
|
||||
(expandtypeattribute (vendor_fm_app_31_0) true)
|
||||
(typeattributeset vendor_perfservice_31_0 (vendor_perfservice))
|
||||
(expandtypeattribute (vendor_perfservice_31_0) true)
|
||||
(typeattributeset vendor_sigmahal_hwservice_31_0 (vendor_sigmahal_hwservice))
|
||||
(expandtypeattribute (vendor_sigmahal_hwservice_31_0) true)
|
||||
(typeattributeset vendor_location_app_31_0 (vendor_location_app))
|
||||
(expandtypeattribute (vendor_location_app_31_0) true)
|
||||
(typeattributeset vendor_seempdw_socket_31_0 (vendor_seempdw_socket))
|
||||
(expandtypeattribute (vendor_seempdw_socket_31_0) true)
|
||||
(typeattributeset vendor_hal_displayconfig_service_31_0 (vendor_hal_displayconfig_service))
|
||||
(expandtypeattribute (vendor_hal_displayconfig_service_31_0) true)
|
||||
(typeattributeset vendor_hal_telephony_service_31_0 (vendor_hal_telephony_service))
|
||||
(expandtypeattribute (vendor_hal_telephony_service_31_0) true)
|
||||
(typeattributeset vendor_mm_parser_prop_31_0 (vendor_mm_parser_prop))
|
||||
(expandtypeattribute (vendor_mm_parser_prop_31_0) true)
|
||||
(typeattributeset vendor_persist_tcm_prop_31_0 (vendor_persist_tcm_prop))
|
||||
(expandtypeattribute (vendor_persist_tcm_prop_31_0) true)
|
||||
(typeattributeset vendor_persist_rcs_prop_31_0 (vendor_persist_rcs_prop))
|
||||
(expandtypeattribute (vendor_persist_rcs_prop_31_0) true)
|
||||
(typeattributeset vendor_qvirtmgr_31_0 (vendor_qvirtmgr))
|
||||
(expandtypeattribute (vendor_qvirtmgr_31_0) true)
|
||||
(typeattributeset vendor_qesdk_service_31_0 (vendor_qesdk_service))
|
||||
(expandtypeattribute (vendor_qesdk_service_31_0) true)
|
||||
(typeattributeset vendor_qcc_authmgr_app_31_0 (vendor_qcc_authmgr_app))
|
||||
(expandtypeattribute (vendor_qcc_authmgr_app_31_0) true)
|
||||
(typeattributeset vendor_qesdk_service_31_0 (vendor_qesdk_service))
|
||||
(expandtypeattribute (vendor_qesdk_service_31_0) true)
|
||||
(typeattributeset vendor_qcc_netstat_app_31_0 (vendor_qcc_netstat_app))
|
||||
(expandtypeattribute (vendor_qcc_netstat_app_31_0) true)
|
||||
(typeattributeset vendor_qcc_lmtp_app_31_0 (vendor_qcc_lmtp_app))
|
||||
(expandtypeattribute (vendor_qcc_lmtp_app_31_0) true)
|
||||
1
generic/private/compat/31.0/31.0.compat.cil
Normal file
1
generic/private/compat/31.0/31.0.compat.cil
Normal file
@@ -0,0 +1 @@
|
||||
;; This file can't be empty
|
||||
8
generic/private/compat/31.0/31.0.ignore.cil
Normal file
8
generic/private/compat/31.0/31.0.ignore.cil
Normal file
@@ -0,0 +1,8 @@
|
||||
;; new_objects - a collection of types that have been introduced that have no
|
||||
;; analogue in older policy. Thus, we do not need to map these types to
|
||||
;; previous ones. Add here to pass checkapi test
|
||||
(type new_objects)
|
||||
(typeattribute new_objects)
|
||||
(typeattributeset new_objects
|
||||
( new_objects
|
||||
))
|
||||
@@ -55,7 +55,7 @@
|
||||
/(system|system_ext|system/system_ext)/bin/(wfdservice|wfdservice64) u:object_r:vendor_wfdservice_exec:s0
|
||||
/(system|system_ext|system/system_ext)/bin/(sigma_miracasthalservice|sigma_miracasthalservice64) u:object_r:vendor_sigmahal_qti_exec:s0
|
||||
/(system_ext|system/system_ext)/bin/qccsyshalservice u:object_r:vendor_qccsyshal_qti_exec:s0
|
||||
/(system_ext|system/system_ext)/bin/qccsyshal@1\.1-service u:object_r:vendor_qccsyshal_qti_exec:s0
|
||||
/(system_ext|system/system_ext)/bin/qccsyshal@[1-9]\.[1-9]-service u:object_r:vendor_qccsyshal_qti_exec:s0
|
||||
/(system_ext|system/system_ext)/bin/mmi u:object_r:vendor_mmi_sys_exec:s0
|
||||
/(system_ext|system/system_ext)/bin/mmi_diag u:object_r:vendor_mmi_sys_exec:s0
|
||||
/(system_ext|system/system_ext)/bin/qspmsvc u:object_r:vendor_qspmsvc_exec:s0
|
||||
|
||||
@@ -45,7 +45,6 @@ user=_app seinfo=platform name=com.qualcomm.location.XT.setup isPrivApp=true dom
|
||||
user=_app seinfo=platform name=com.qualcomm.location isPrivApp=true domain=vendor_location_app type=app_data_file
|
||||
user=_app seinfo=platform name=com.qualcomm.wfd.service:wfd_service domain=vendor_wfd_app type=app_data_file levelfrom=all
|
||||
user=_app seinfo=platform name=com.qualcomm.wfd.client domain=vendor_wfd_app type=app_data_file levelfrom=all
|
||||
user=_app seinfo=platform name=com.qualcomm.qti.ssmeditor domain=vendor_qconfig_app type=app_data_file levelfrom=all
|
||||
|
||||
#Add new domain for QCC
|
||||
user=system seinfo=platform name=com.qualcomm.qti.qdma isPrivApp=true domain=vendor_qcc_app type=system_app_data_file
|
||||
|
||||
@@ -45,5 +45,6 @@ get_prop(system_app, vendor_wigig_core_prop);
|
||||
|
||||
#allow system_app to access faceauth
|
||||
hal_client_domain(system_app, hal_face)
|
||||
|
||||
#allow system_app to access vendor_hal_dspmanager
|
||||
hal_client_domain(system_app, vendor_hal_dspmanager);
|
||||
unix_socket_connect(system_app, vendor_dpmtcm, vendor_tcmd);
|
||||
|
||||
3
generic/private/untrusted_app.te
Normal file → Executable file
3
generic/private/untrusted_app.te
Normal file → Executable file
@@ -35,3 +35,6 @@ userdebug_or_eng(`
|
||||
qesdk_app_access(untrusted_app);
|
||||
typeattribute untrusted_app vendor_hal_qvrservice_qti_socket_fd_use_client;
|
||||
typeattribute untrusted_app vendor_hal_sxrservice_qti_socket_fd_use_client;
|
||||
|
||||
# allow app to be a client of DSP HAL
|
||||
hal_client_domain(untrusted_app, vendor_hal_dspmanager)
|
||||
3
generic/private/untrusted_app_25.te
Normal file → Executable file
3
generic/private/untrusted_app_25.te
Normal file → Executable file
@@ -26,3 +26,6 @@
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
qesdk_app_access(untrusted_app_25);
|
||||
|
||||
# allow app to be a client of DSP HAL
|
||||
hal_client_domain(untrusted_app_25, vendor_hal_dspmanager)
|
||||
|
||||
3
generic/private/untrusted_app_27.te
Normal file → Executable file
3
generic/private/untrusted_app_27.te
Normal file → Executable file
@@ -29,3 +29,6 @@ unix_socket_connect(untrusted_app_27,vendor_dpmtcm, vendor_dpmd);
|
||||
allow untrusted_app_27 vendor_dpmtcm_socket:sock_file w_file_perms;
|
||||
allow untrusted_app_27 vendor_dpmd:unix_stream_socket connectto;
|
||||
qesdk_app_access(untrusted_app_27);
|
||||
|
||||
# allow app to be a client of DSP HAL
|
||||
hal_client_domain(untrusted_app_27, vendor_hal_dspmanager)
|
||||
|
||||
3
generic/private/untrusted_app_29.te
Normal file → Executable file
3
generic/private/untrusted_app_29.te
Normal file → Executable file
@@ -28,3 +28,6 @@
|
||||
qesdk_app_access(untrusted_app_29);
|
||||
typeattribute untrusted_app_29 vendor_hal_qvrservice_qti_socket_fd_use_client;
|
||||
typeattribute untrusted_app_29 vendor_hal_sxrservice_qti_socket_fd_use_client;
|
||||
|
||||
# allow app to be a client of DSP HAL
|
||||
hal_client_domain(untrusted_app_29, vendor_hal_dspmanager)
|
||||
|
||||
12
generic/product/prebuilts/api/31.0/31.0.cil
Executable file
12
generic/product/prebuilts/api/31.0/31.0.cil
Executable file
@@ -0,0 +1,12 @@
|
||||
(typeattributeset vendor_hal_systemhelper_hwservice_31_0 (vendor_hal_systemhelper_hwservice))
|
||||
(expandtypeattribute (vendor_hal_systemhelper_hwservice_31_0) true)
|
||||
(typeattribute vendor_hal_systemhelper_hwservice_31_0)
|
||||
(typeattributeset vendor_display_notch_prop_31_0 (vendor_display_notch_prop))
|
||||
(expandtypeattribute (vendor_display_notch_prop_31_0) true)
|
||||
(typeattribute vendor_display_notch_prop_31_0)
|
||||
(typeattributeset vendor_systemhelper_app_31_0 (vendor_systemhelper_app))
|
||||
(expandtypeattribute (vendor_systemhelper_app_31_0) true)
|
||||
(typeattribute vendor_systemhelper_app_31_0)
|
||||
(typeattributeset vendor_sys_qti_display_31_0 (vendor_sys_qti_display))
|
||||
(expandtypeattribute (vendor_sys_qti_display_31_0) true)
|
||||
(typeattribute vendor_sys_qti_display_31_0)
|
||||
26
generic/product/prebuilts/api/31.0/private/file.te
Normal file
26
generic/product/prebuilts/api/31.0/private/file.te
Normal file
@@ -0,0 +1,26 @@
|
||||
# Copyright (c) 2019, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
27
generic/product/prebuilts/api/31.0/private/file_contexts
Normal file
27
generic/product/prebuilts/api/31.0/private/file_contexts
Normal file
@@ -0,0 +1,27 @@
|
||||
# Copyright (c) 2019-2020, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED"AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
/(product|system/product)/bin/init\.qti\.display\.sh u:object_r:vendor_sys_qti_display_exec:s0
|
||||
@@ -0,0 +1,29 @@
|
||||
# Copyright (c) 2019, The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
vendor.qti.hardware.systemhelper::ISystemResource u:object_r:vendor_hal_systemhelper_hwservice:s0
|
||||
vendor.qti.hardware.systemhelper::ISystemEvent u:object_r:vendor_hal_systemhelper_hwservice:s0
|
||||
27
generic/product/prebuilts/api/31.0/private/property.te
Normal file
27
generic/product/prebuilts/api/31.0/private/property.te
Normal file
@@ -0,0 +1,27 @@
|
||||
# Copyright (c) 2019 The Linux Foundation. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions are
|
||||
# met:
|
||||
# * Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# * Redistributions in binary form must reproduce the above
|
||||
# copyright notice, this list of conditions and the following
|
||||
# disclaimer in the documentation and/or other materials provided
|
||||
# with the distribution.
|
||||
# * Neither the name of The Linux Foundation nor the names of its
|
||||
# contributors may be used to endorse or promote products derived
|
||||
# from this software without specific prior written permission.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||
# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
|
||||
# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
||||
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
||||
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
||||
# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
|
||||
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user