Merge "Revert "Remove vendor_firmware_file type"" am: 1f81b8e744

am: b5000a0215

Change-Id: Iceb151d7550645925fb7b122dfff883f974fbd17
This commit is contained in:
Jeffrey Vander Stoep
2018-02-28 23:47:51 +00:00
committed by android-build-merger
4 changed files with 8 additions and 3 deletions

1
sepolicy/vendor/bug_map vendored Normal file
View File

@@ -0,0 +1 @@
surfaceflinger vendor_firmware_file dir 68213100

View File

@@ -71,6 +71,8 @@ type sensors_vendor_data_file, file_type, data_file_type;
type audio_vendor_data_file, file_type, data_file_type;
type mediadrm_vendor_data_file, file_type, data_file_type;
type vendor_firmware_file, vendor_file_type, file_type;
#data sysfs files
type sysfs_data, fs_type, sysfs_type;

View File

@@ -120,6 +120,7 @@
/system/bin/move_widevine_data\.sh u:object_r:move-widevine-data-sh_exec:s0
# files in /vendor
/vendor/firmware(/.*)? u:object_r:vendor_firmware_file:s0
/vendor/bin/hw/android\.hardware\.dumpstate@1\.0-service.wahoo u:object_r:hal_dumpstate_impl_exec:s0
/vendor/bin/hw/android\.hardware\.vr@1\.0-service.wahoo u:object_r:hal_vr_default_exec:s0
/vendor/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.1-service.wahoo u:object_r:hal_fingerprint_default_exec:s0

View File

@@ -3,10 +3,11 @@ userdebug_or_eng(`
allow kernel self:socket create;
')
dontaudit kernel kernel:system module_request;
allow kernel vendor_firmware_file:dir search;
allow kernel vendor_firmware_file:file r_file_perms;
allow kernel vendor_firmware_file:lnk_file read;
# Read FDs from /vendor/firmware
allow kernel vendor_file:file r_file_perms;
dontaudit kernel kernel:system module_request;
allow kernel debugfs_ipc:dir search;
allow kernel persist_file:dir search;