Added individual permissive lines to each daemon.

Bug: 34784662 Test: It compiles Change-Id: I4db2f4964a276d43209616db1fd24ef14a09db79
2026-02-01 07:33:36 +00:00 · 2017-02-03 13:06:59 -08:00
parent 2ab0390195
commit 78d994b6e2
22 changed files with 101 additions and 16 deletions
--- a/sepolicy/adsprpcd.te
+++ b/sepolicy/adsprpcd.te
@@ -1,4 +1,8 @@
-type adsprpcd, domain, domain_deprecated;
+type adsprpcd, domain;
 type adsprpcd_exec, exec_type, file_type;

-init_daemon_domain(adsprpcd)
+init_daemon_domain(adsprpcd)
+
+userdebug_or_eng(`
+permissive adsprpcd;
+')
--- a/sepolicy/init_power.te
+++ b/sepolicy/init_power.te
@@ -2,3 +2,7 @@ type init_power, domain;
 type init_power_exec, exec_type, file_type;

 init_daemon_domain(init_power)
+
+userdebug_or_eng(`
+permissive init_power;
+')
--- a/sepolicy/init_radio.te
+++ b/sepolicy/init_radio.te
@@ -3,3 +3,7 @@ type init_radio, domain;
 type init_radio_exec, exec_type, file_type;

 init_daemon_domain(init_radio)
+
+userdebug_or_eng(`
+permissive init_radio;
+')
--- a/sepolicy/irsc_util.te
+++ b/sepolicy/irsc_util.te
@@ -1,4 +1,8 @@
-type irsc_util, domain, domain_deprecated;
+type irsc_util, domain;
 type irsc_util_exec, exec_type, file_type;

 init_daemon_domain(irsc_util)
+
+userdebug_or_eng(`
+permissive irsc_util;
+')
--- a/sepolicy/location.te
+++ b/sepolicy/location.te
@@ -2,3 +2,7 @@ type location, domain;
 type location_exec, exec_type, file_type;

 init_daemon_domain(location)
+
+userdebug_or_eng(`
+permissive location;
+')
--- a/sepolicy/netmgrd.te
+++ b/sepolicy/netmgrd.te
@@ -1,5 +1,9 @@
-type netmgrd, domain, domain_deprecated;
+type netmgrd, domain;
 type netmgrd_exec, exec_type, file_type;

 net_domain(netmgrd)
 init_daemon_domain(netmgrd)
+
+userdebug_or_eng(`
+permissive netmgrd;
+')
--- a/sepolicy/pd_services.te
+++ b/sepolicy/pd_services.te
@@ -1,4 +1,8 @@
-type pd_mapper, domain, domain_deprecated;
+type pd_mapper, domain;

 type pd_mapper_exec, exec_type, file_type;
 init_daemon_domain(pd_mapper);
+
+userdebug_or_eng(`
+permissive pd_mapper;
+')
--- a/sepolicy/per_mgr.te
+++ b/sepolicy/per_mgr.te
@@ -1,5 +1,9 @@
 # Policy for pm-service and pm-proxy
-type per_mgr, domain, domain_deprecated;
+type per_mgr, domain;
 type per_mgr_exec, exec_type, file_type;

 init_daemon_domain(per_mgr);
+
+userdebug_or_eng(`
+permissive per_mgr;
+')
--- a/sepolicy/perfd.te
+++ b/sepolicy/perfd.te
@@ -2,3 +2,7 @@ type perfd, domain;
 type perfd_exec, exec_type, file_type;

 init_daemon_domain(perfd)
+
+userdebug_or_eng(`
+permissive perfd;
+')
--- a/sepolicy/port-bridge.te
+++ b/sepolicy/port-bridge.te
@@ -2,3 +2,7 @@ type port-bridge, domain;
 type port-bridge_exec, exec_type, file_type;

 init_daemon_domain(port-bridge)
+
+userdebug_or_eng(`
+permissive port-bridge;
+')
--- a/sepolicy/qti.te
+++ b/sepolicy/qti.te
@@ -1,5 +1,9 @@
-type qti, domain, domain_deprecated;
+type qti, domain;
 type qti_exec, exec_type, file_type;

 init_daemon_domain(qti)
 net_domain(qti)
+
+userdebug_or_eng(`
+permissive qti;
+')
--- a/sepolicy/ramdump.te
+++ b/sepolicy/ramdump.te
@@ -3,4 +3,5 @@ type ramdump_exec, exec_type, file_type;
 userdebug_or_eng(`
 type ramdump, domain;
 init_daemon_domain(ramdump)
+permissive ramdump;
 ')
--- a/sepolicy/rfs_access.te
+++ b/sepolicy/rfs_access.te
@@ -1,4 +1,8 @@
-type rfs_access, domain, domain_deprecated;
+type rfs_access, domain;
 type rfs_access_exec, exec_type, file_type;

 init_daemon_domain(rfs_access)
+
+userdebug_or_eng(`
+permissive rfs_access;
+')
--- a/sepolicy/rmt_storage.te
+++ b/sepolicy/rmt_storage.te
@@ -1,4 +1,8 @@
-type rmt_storage, domain, domain_deprecated;
+type rmt_storage, domain;
 type rmt_storage_exec, exec_type, file_type;

 init_daemon_domain(rmt_storage)
+
+userdebug_or_eng(`
+permissive rmt_storage;
+')
--- a/sepolicy/sensors.te
+++ b/sepolicy/sensors.te
@@ -1,5 +1,9 @@
 # Policy for sensor daemon
-type sensors, domain, domain_deprecated;
+type sensors, domain;
 type sensors_exec, exec_type, file_type;

-init_daemon_domain(sensors)
+init_daemon_domain(sensors)
+
+userdebug_or_eng(`
+permissive sensors;
+')
--- a/sepolicy/ssr_diag.te
+++ b/sepolicy/ssr_diag.te
@@ -1,4 +1,8 @@
-type ssr_diag, domain, domain_deprecated;
+type ssr_diag, domain;
 type ssr_diag_exec, exec_type, file_type;

 init_daemon_domain(ssr_diag);
+
+userdebug_or_eng(`
+permissive ssr_diag;
+')
--- a/sepolicy/ssr_setup.te
+++ b/sepolicy/ssr_setup.te
@@ -1,4 +1,8 @@
-type ssr_setup, domain, domain_deprecated;
+type ssr_setup, domain;
 type ssr_setup_exec, exec_type, file_type;

 init_daemon_domain(ssr_setup);
+
+userdebug_or_eng(`
+permissive ssr_setup;
+')
--- a/sepolicy/subsystem_ramdump.te
+++ b/sepolicy/subsystem_ramdump.te
@@ -1,4 +1,8 @@
-type subsystem_ramdump, domain, domain_deprecated;
+type subsystem_ramdump, domain;
 type subsystem_ramdump_exec, exec_type, file_type;

 init_daemon_domain(subsystem_ramdump);
+
+userdebug_or_eng(`
+permissive subsystem_ramdump;
+')
--- a/sepolicy/thermal-engine.te
+++ b/sepolicy/thermal-engine.te
@@ -2,3 +2,7 @@ type thermal-engine, domain;
 type thermal-engine_exec, exec_type, file_type;

 init_daemon_domain(thermal-engine)
+
+userdebug_or_eng(`
+permissive thermal-engine;
+')
--- a/sepolicy/time_daemon.te
+++ b/sepolicy/time_daemon.te
@@ -1,6 +1,10 @@
-type time_daemon, domain, domain_deprecated;
+type time_daemon, domain;
 type time_daemon_exec, exec_type, file_type;

 init_daemon_domain(time_daemon)

 type time_data_file, file_type, data_file_type;
+
+userdebug_or_eng(`
+permissive time_daemon;
+')
--- a/sepolicy/wcnss_filter.te
+++ b/sepolicy/wcnss_filter.te
@@ -4,3 +4,7 @@ type wcnss_filter_exec, exec_type, file_type;
 init_daemon_domain(wcnss_filter)

 set_prop(wcnss_filter, wc_prop)
+
+userdebug_or_eng(`
+permissive wcnss_filter;
+')
--- a/sepolicy/wcnss_service.te
+++ b/sepolicy/wcnss_service.te
@@ -1,5 +1,9 @@
-type wcnss_service, domain, domain_deprecated;
+type wcnss_service, domain;
 type wcnss_service_exec, exec_type, file_type;

 init_daemon_domain(wcnss_service)
 net_domain(wcnss_service)
+
+userdebug_or_eng(`
+permissive wcnss_service;
+')