Max Bires f34b903cf8 Added file_contexts for more sysfs_camera files. ...

These should finish up the camera denials during boot:
denied { read } for pid=760 comm="cameraserver" name="name" dev="sysfs"
ino=42189 scontext=u:r:cameraserver:s0 tcontext=u:object_r:sysfs:s0
tclass=file

denied { open } for pid=757 comm="cameraserver"
path="/sys/devices/soc/caa4000.qcom,fd/video4linux/video2/name"
dev="sysfs" ino=42231 scontext=u:r:cameraserver:s0
tcontext=u:object_r:sysfs:s0 tclass=file

Bug: 34784662
Test: The above denials no longer appear during boot
Change-Id: I1ecf20215be36c2d34663cfa329988cf40422ae1

2017-02-16 09:09:50 -08:00

..

adsprpcd.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

audioserver.te

Added audioserver.te and some allow rules and perfd_socket type

2017-02-15 09:02:32 -08:00

bluetooth.te

muskie: enable BT

2016-11-07 15:28:24 -08:00

bootanim.te

Added bootanim.te to add an extra allow rule for muskie

2017-02-07 20:41:31 -08:00

cameraserver.te

Added sysfs_camera file type and cameraserver allow rules.

2017-02-14 17:51:11 -08:00

device.te

Added sdd_block_device so tee could access what was a generic blk_file

2017-02-10 13:33:11 -08:00

domain.te

Added surfaceflinger.te and domain.te to expand policy coverage.

2017-02-03 15:26:39 -08:00

file_contexts

Added file_contexts for more sysfs_camera files.

2017-02-16 09:09:50 -08:00

file.te

Adding init_power allows and supporting file_context/file.te changes.

2017-02-15 13:12:50 -08:00

init_power.te

Adding init_power allows and supporting file_context/file.te changes.

2017-02-15 13:12:50 -08:00

init_radio.te

Added init_radio allows and corresponding file_context changes.

2017-02-14 15:53:23 -08:00

init.te

Adding init allows and supporting file_context.

2017-02-15 08:53:37 -08:00

ioctl_defines

Fixed up sepolicy to handle per_mgr.te and per_proxy.te

2017-02-06 20:29:18 -08:00

ioctl_macros

Fixed up sepolicy to handle per_mgr.te and per_proxy.te

2017-02-06 20:29:18 -08:00

irsc_util.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

kernel.te

Adding allows to init.te and kernel.te to address boot logs.

2017-02-07 14:56:31 -08:00

location.te

Added location allow rules and corresponding file contexts

2017-02-10 09:58:01 -08:00

netmgrd.te

Added some allows to netmgrd.te

2017-02-10 14:40:13 -08:00

pd_services.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

per_mgr.te

Fixed up sepolicy to handle per_mgr.te and per_proxy.te

2017-02-06 20:29:18 -08:00

per_proxy.te

Fixed up sepolicy to handle per_mgr.te and per_proxy.te

2017-02-06 20:29:18 -08:00

perfd.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

port-bridge.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

property_contexts

Adding cameraserver.te and appropriate camera_prop

2017-02-10 14:09:20 -08:00

property.te

Adding cameraserver.te and appropriate camera_prop

2017-02-10 14:09:20 -08:00

qti.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

ramdump.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

rfs_access.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

rild.te

Adding rild.te and associated allows for bootup denials

2017-02-14 13:36:12 -08:00

rmt_storage.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

sensors.te

Adding self socket allow rule for sensors.te

2017-02-14 17:19:36 -08:00

service_contexts

Adding files for management of service_contexts.

2017-02-03 14:21:44 -08:00

service.te

Adding files for management of service_contexts.

2017-02-03 14:21:44 -08:00

ssr_diag.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

ssr_setup.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

subsystem_ramdump.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

surfaceflinger.te

Added dontaudit to surfaceflinger for firmware file dir search

2017-02-10 10:44:36 -08:00

system_server.te

Adding search dir permission to system_server.

2017-02-14 18:00:32 -08:00

tee.te

Added sdd_block_device so tee could access what was a generic blk_file

2017-02-10 13:33:11 -08:00

thermal-engine.te

Added thermal engine allow rule and defined sysfs_thermal files

2017-02-09 23:07:08 +00:00

time_daemon.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

ueventd.te

Adding sysfs_thermal write file permissions to ueventd.te

2017-02-14 17:25:13 -08:00

wcnss_filter.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00

wcnss_service.te

Added individual permissive lines to each daemon.

2017-02-03 13:06:59 -08:00