sepolicy: Add rules for QCV init rc and sh scripts

- Add rules to allow execution of init.qti.qcv.sh
- Allow init.qti.qcv.sh to set_prop vendor_soc_name_prop
- Allow init.qti.qcv.rc to read vendor_soc_name_prop

Change-Id: I4f548bf0ab424dceba1d5b72c1ec8a596a037431
This commit is contained in:
Roopesh Nataraja
2020-04-07 19:13:33 -07:00
parent f511f71e18
commit 9074980d8a
5 changed files with 14 additions and 6 deletions

View File

@@ -490,6 +490,7 @@
/(vendor|system/vendor)/bin/qca6234-service.sh u:object_r:vendor_qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.qti\.kernel\.sh u:object_r:vendor_qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.kernel\.post_boot\.sh u:object_r:vendor_qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.qti\.qcv\.sh u:object_r:vendor_qti_init_shell_exec:s0
#Limits sysfs node
/sys/module/msm_isense_cdsp/data u:object_r:sysfs_thermal:s0

View File

@@ -176,8 +176,10 @@ allow vendor_qti_init_shell proc_meminfo:file r_file_perms;
allow vendor_qti_init_shell vendor_sysfs_suspend:file w_file_perms;
# Set ro.vendor.qti.soc to soc_id in init early boot script
set_prop(vendor_qti_init_shell, vendor_soc_prop)
# Set ro.vendor.qti.soc to soc_id in QCV init script
set_prop(vendor_qti_init_shell, vendor_soc_prop);
# Set ro.vendor.qti.soc.name to soc_name in QCV init script
set_prop(vendor_qti_init_shell, vendor_soc_name_prop);
# Get persist.console.silent.config for kernel console log level
get_prop(vendor_qti_init_shell, vendor_console_log_level_prop)

View File

@@ -103,8 +103,9 @@ vendor_restricted_prop(vendor_adsprpc_prop);
# Wifi version recorder
vendor_internal_prop(vendor_wifi_version);
# Property for storing soc_id
vendor_internal_prop(vendor_soc_prop)
# QCV properties for storing soc_id and soc_name
vendor_internal_prop(vendor_soc_prop);
vendor_internal_prop(vendor_soc_name_prop);
#kernel console log level
vendor_internal_prop(vendor_console_log_level_prop)

View File

@@ -128,8 +128,9 @@ vendor.display.qdcm_socket_service u:object_r:vendor_qdcmss_prop:s0
#vendor-adsprpc
vendor.fastrpc. u:object_r:vendor_adsprpc_prop:s0
# Property for storing soc_id
ro.vendor.qti.soc u:object_r:vendor_soc_prop:s0
# QCV properties for storing soc_id and soc_name
ro.vendor.qti.soc u:object_r:vendor_soc_prop:s0
ro.vendor.qti.soc.name u:object_r:vendor_soc_name_prop:s0
#kernel console log level
persist.console.silent.config u:object_r:vendor_console_log_level_prop:s0

View File

@@ -94,3 +94,6 @@ set_prop(vendor_init, vendor_bluetooth_prop)
userdebug_or_eng(`
allow vendor_init proc_security:file rw_file_perms;
')
# Allow vendor_init to read vendor_soc_name_prop
get_prop(vendor_init, vendor_soc_name_prop);