Revert "Remove vendor_firmware_file type"

This reverts commit d96b55b88a.

Reason for revert: b/74022074

Bug: 74022074
Change-Id: I84c5345c1a205257e088eccd01d3d93fd30a37c1
This commit is contained in:
Jeffrey Vander Stoep
2018-02-28 23:35:19 +00:00
parent d96b55b88a
commit a49507adc5
4 changed files with 8 additions and 3 deletions

1
sepolicy/vendor/bug_map vendored Normal file
View File

@@ -0,0 +1 @@
surfaceflinger vendor_firmware_file dir 68213100

View File

@@ -71,6 +71,8 @@ type sensors_vendor_data_file, file_type, data_file_type;
type audio_vendor_data_file, file_type, data_file_type;
type mediadrm_vendor_data_file, file_type, data_file_type;
type vendor_firmware_file, vendor_file_type, file_type;
#data sysfs files
type sysfs_data, fs_type, sysfs_type;

View File

@@ -120,6 +120,7 @@
/system/bin/move_widevine_data\.sh u:object_r:move-widevine-data-sh_exec:s0
# files in /vendor
/vendor/firmware(/.*)? u:object_r:vendor_firmware_file:s0
/vendor/bin/hw/android\.hardware\.dumpstate@1\.0-service.wahoo u:object_r:hal_dumpstate_impl_exec:s0
/vendor/bin/hw/android\.hardware\.vr@1\.0-service.wahoo u:object_r:hal_vr_default_exec:s0
/vendor/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.1-service.wahoo u:object_r:hal_fingerprint_default_exec:s0

View File

@@ -3,10 +3,11 @@ userdebug_or_eng(`
allow kernel self:socket create;
')
dontaudit kernel kernel:system module_request;
allow kernel vendor_firmware_file:dir search;
allow kernel vendor_firmware_file:file r_file_perms;
allow kernel vendor_firmware_file:lnk_file read;
# Read FDs from /vendor/firmware
allow kernel vendor_file:file r_file_perms;
dontaudit kernel kernel:system module_request;
allow kernel debugfs_ipc:dir search;
allow kernel persist_file:dir search;