Max Bires c4bbe07c7a Added sysfs_camera file type and cameraserver allow rules. ...

Added allow rules to address the following denials:
denied { open } for pid=754 comm="cameraserver"
path="/sys/devices/soc/8c0000.qcom,msm-cam/video4linux/video0/name"
dev="sysfs" ino=41699 scontext=u:r:cameraserver:s0
tcontext=u:object_r:sysfs:s0 tclass=file

denied { read } for pid=754 comm="cameraserver" name="name" dev="sysfs"
ino=41699 scontext=u:r:cameraserver:s0 tcontext=u:object_r:sysfs:s0
tclass=file

denied { search } for pid=757 comm="cameraserver"
name="8c0000.qcom,msm-cam" dev="sysfs" ino=19077
scontext=u:r:cameraserver:s0 tcontext=u:object_r:sysfs_camera:s0
tclass=dir

Bug: 34784662
Test: The above denials are no longer present during bootup
Change-Id: I967ee7c4147eb3328fcbcf524eb6c4759f70c59b

2017-02-14 17:51:11 -08:00

..

adsprpcd.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

bluetooth.te

muskie: enable BT

2016-11-07 15:28:24 -08:00

bootanim.te

Added bootanim.te to add an extra allow rule for muskie

2017-02-07 20:41:31 -08:00

cameraserver.te

Added sysfs_camera file type and cameraserver allow rules.

2017-02-14 17:51:11 -08:00

device.te

Added sdd_block_device so tee could access what was a generic blk_file

2017-02-10 13:33:11 -08:00

domain.te

Added surfaceflinger.te and domain.te to expand policy coverage.

2017-02-03 15:26:39 -08:00

file_contexts

Added sysfs_camera file type and cameraserver allow rules.

2017-02-14 17:51:11 -08:00

file.te

Added sysfs_camera file type and cameraserver allow rules.

2017-02-14 17:51:11 -08:00

init_power.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

init_radio.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

init.te

Adding allows to init.te and kernel.te to address boot logs.

2017-02-07 14:56:31 -08:00

ioctl_defines

Fixed up sepolicy to handle per_mgr.te and per_proxy.te

2017-02-06 20:29:18 -08:00

ioctl_macros

Fixed up sepolicy to handle per_mgr.te and per_proxy.te

2017-02-06 20:29:18 -08:00

irsc_util.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

kernel.te

Adding allows to init.te and kernel.te to address boot logs.

2017-02-07 14:56:31 -08:00

location.te

Added location allow rules and corresponding file contexts

2017-02-10 09:58:01 -08:00

netmgrd.te

Added some allows to netmgrd.te

2017-02-10 14:40:13 -08:00

pd_services.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

per_mgr.te

Fixed up sepolicy to handle per_mgr.te and per_proxy.te

2017-02-06 20:29:18 -08:00

per_proxy.te

Fixed up sepolicy to handle per_mgr.te and per_proxy.te

2017-02-06 20:29:18 -08:00

perfd.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

port-bridge.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

property_contexts

Adding cameraserver.te and appropriate camera_prop

2017-02-10 14:09:20 -08:00

property.te

Adding cameraserver.te and appropriate camera_prop

2017-02-10 14:09:20 -08:00

qti.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

ramdump.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

rfs_access.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

rmt_storage.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

sensors.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

service_contexts

Adding files for management of service_contexts.

2017-02-03 14:21:44 -08:00

service.te

Adding files for management of service_contexts.

2017-02-03 14:21:44 -08:00

ssr_diag.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

ssr_setup.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

subsystem_ramdump.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

surfaceflinger.te

Added dontaudit to surfaceflinger for firmware file dir search

2017-02-10 10:44:36 -08:00

system_server.te

Adding system_server.te / file_contexts to handle some boot denials.

2017-02-09 14:52:34 -08:00

tee.te

Added sdd_block_device so tee could access what was a generic blk_file

2017-02-10 13:33:11 -08:00

thermal-engine.te

Added thermal engine allow rule and defined sysfs_thermal files

2017-02-09 23:07:08 +00:00

time_daemon.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

wcnss_filter.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

wcnss_service.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00