diff --git a/BoardConfig.mk b/BoardConfig.mk index a11ff36..ecac3db 100644 --- a/BoardConfig.mk +++ b/BoardConfig.mk @@ -161,6 +161,8 @@ ENABLE_VENDOR_RIL_SERVICE := true # Sepolicy include device/mediatek/sepolicy_vndr/SEPolicy.mk BOARD_VENDOR_SEPOLICY_DIRS += $(DEVICE_PATH)/sepolicy/vendor +SYSTEM_EXT_PRIVATE_SEPOLICY_DIRS += $(DEVICE_PATH)/sepolicy/private +SYSTEM_EXT_PUBLIC_SEPOLICY_DIRS += $(DEVICE_PATH)/sepolicy/public # SPL VENDOR_SECURITY_PATCH := 2021-10-01 diff --git a/sepolicy/private/property_context b/sepolicy/private/property_context new file mode 100644 index 0000000..64b38dd --- /dev/null +++ b/sepolicy/private/property_context @@ -0,0 +1,17 @@ +# Audio +audio.adm.buffering.ms u:object_r:system_audio_prop:s0 +audio_hal.period_multiplier u:object_r:system_audio_prop:s0 + +# Camera +demo.hole u:object_r:exported_system_prop:s0 +demo.near u:object_r:exported_system_prop:s0 +demo.far u:object_r:exported_system_prop:s0 +demo.fb u:object_r:exported_system_prop:s0 +camera.sensor. u:object_r:system_camera_prop:s0 + +# Fingerprint +gf.debug.dump_data u:object_r:system_fingerprint_prop:s0 +gf.debug.dump_bigdata_data u:object_r:system_fingerprint_prop:s0 +persist.sys.fp.goodix. u:object_r:system_fingerprint_prop:s0 +persist.vendor.sys.fp. u:object_r:system_fingerprint_prop:s0 +persist.sys.fp.info u:object_r:system_fingerprint_prop:s0 \ No newline at end of file diff --git a/sepolicy/public/property.te b/sepolicy/public/property.te new file mode 100644 index 0000000..b0686bd --- /dev/null +++ b/sepolicy/public/property.te @@ -0,0 +1,8 @@ +# Audio +system_public_prop(system_audio_prop) + +# Camera +system_public_prop(system_camera_prop) + +# Fingerprint +system_public_prop(system_fingerprint_prop) diff --git a/sepolicy/vendor/hal_fingerprint_default.te b/sepolicy/vendor/hal_fingerprint_default.te index 779c3ad..8a53d48 100644 --- a/sepolicy/vendor/hal_fingerprint_default.te +++ b/sepolicy/vendor/hal_fingerprint_default.te @@ -23,6 +23,8 @@ allow hal_fingerprint_default hal_fingerprint_default_exec:file entrypoint; # Allow fingerprint HAL to get and set its props get_prop(hal_fingerprint_default, vendor_fingerprint_prop) set_prop(hal_fingerprint_default, vendor_fingerprint_prop) +get_prop(hal_fingerprint_default, system_fingerprint_prop) +set_prop(hal_fingerprint_default, system_fingerprint_prop) # Allow fingerprint HAL to create netlink_socket allow hal_fingerprint_default self:netlink_socket create_socket_perms_no_ioctl; diff --git a/sepolicy/vendor/mtk_hal_audio.te b/sepolicy/vendor/mtk_hal_audio.te index 437bac7..5983bc1 100644 --- a/sepolicy/vendor/mtk_hal_audio.te +++ b/sepolicy/vendor/mtk_hal_audio.te @@ -1 +1,4 @@ +get_prop(mtk_hal_audio, system_audio_prop) +set_prop(mtk_hal_audio, system_audio_prop) + allow mtk_hal_audio persist_data_file:dir { search }; diff --git a/sepolicy/vendor/mtk_hal_camera.te b/sepolicy/vendor/mtk_hal_camera.te index 4ffe83f..4b3d082 100644 --- a/sepolicy/vendor/mtk_hal_camera.te +++ b/sepolicy/vendor/mtk_hal_camera.te @@ -5,3 +5,6 @@ allow mtk_hal_camera persist_camera_data_file:file create_file_perms; allow mtk_hal_camera vendor_data_file:dir rw_dir_perms; allow mtk_hal_camera vendor_data_file:file create_file_perms; + +set_prop(mtk_hal_camera, system_camera_prop) +get_prop(mtk_hal_camera, system_camera_prop) diff --git a/sepolicy/vendor/property_contexts b/sepolicy/vendor/property_contexts index 12e2f9d..80bb684 100644 --- a/sepolicy/vendor/property_contexts +++ b/sepolicy/vendor/property_contexts @@ -1,6 +1,4 @@ # Audio -audio.adm.buffering.ms u:object_r:vendor_mtk_audiohal_prop:s0 -audio_hal.period_multiplier u:object_r:vendor_mtk_audiohal_prop:s0 vendor.audio.chk. u:object_r:vendor_mtk_audiohal_prop:s0 vendor.audio.mic. u:object_r:vendor_mtk_audiohal_prop:s0 vendor.audio.spkcal.copy.inhal u:object_r:vendor_mtk_audiohal_prop:s0 @@ -11,19 +9,10 @@ vendor.debug.camera.enableMetaPending u:object_r:vendor_mtk_camera_prop:s0 vendor.debug.camera.enableMetaMerge u:object_r:vendor_mtk_camera_prop:s0 vendor.debug.tpi. u:object_r:vendor_mtk_camera_prop:s0 persist.vendor.camera. u:object_r:vendor_mtk_camera_prop:s0 -demo.hole u:object_r:vendor_mtk_camera_prop:s0 -demo.near u:object_r:vendor_mtk_camera_prop:s0 -demo.far u:object_r:vendor_mtk_camera_prop:s0 -demo.fb u:object_r:vendor_mtk_camera_prop:s0 -camera.sensor. u:object_r:vendor_mtk_camera_prop:s0 persist.camera.module. u:object_r:vendor_mtk_camera_prop:s0 # Fingerprint -gf.debug.dump_data u:object_r:vendor_fingerprint_prop:s0 -gf.debug.dump_bigdata_data u:object_r:vendor_fingerprint_prop:s0 -persist.sys.fp.goodix. u:object_r:vendor_fingerprint_prop:s0 persist.vendor.sys.fp. u:object_r:vendor_fingerprint_prop:s0 -persist.sys.fp.info u:object_r:vendor_fingerprint_prop:s0 vendor.fps_hal. u:object_r:vendor_fingerprint_prop:s0 # IR