xiaomi-unicorn1/android_device_qcom_sepolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

sepolicy: Update qseecomd sepolicy on tzstorage data folder

Browse Source 
update qseecomd policy to allow sfs listener to write to
/data/vendor/tzstorage folder.

Change-Id: I452fbdac22e4ab9df54c6a142c20d9e8e9816feb
This commit is contained in:
mohamed sunfeer
2018-06-26 14:24:14 +05:30
parent ab6975a01d
commit d576738d45
3 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
vendor/common/file.te vendored
View File

@@ -129,5 +129,8 @@ type data_qsee_file, file_type, data_file_type;
#TUI Files
type vendor_tui_data_file, file_type, data_file_type;
# SFS listener data file
type data_tzstorage_file, file_type, data_file_type;
#NNHAL files
type hal_neuralnetworks_data_file, file_type, data_file_type;

1
vendor/common/file_contexts vendored
View File

@@ -209,6 +209,7 @@
/data/vendor/connectivity(/.*)? u:object_r:cnd_data_file:s0
/data/vendor/misc/qsee(/.*)? u:object_r:data_qsee_file:s0
/data/vendor/tui(/.*)? u:object_r:vendor_tui_data_file:s0
/data/vendor/tzstorage(/.*)? u:object_r:data_tzstorage_file:s0
/data/vendor/tombstones/rfs(/.*)? u:object_r:vendor_tombstone_data_file:s0
/data/vendor/mdmhelperdata(/.*)? u:object_r:vendor_mdmhelperdata_data_file:s0

4
vendor/common/tee.te vendored
View File

@@ -18,6 +18,10 @@ allow tee persist_data_file:file create_file_perms;
allow tee time_daemon:unix_stream_socket connectto;
# Allow SFS to write to data partition
allow tee data_tzstorage_file:dir create_dir_perms;
allow tee data_tzstorage_file:file create_file_perms;
#secureUI
hal_client_domain(tee, hal_tui_comm);
hal_client_domain(tee, hal_qdutils_disp);