Evolution-x-devices/device_xiaomi_rosemary
2
0
Fork 0
mirror of https://github.com/Evolution-X-Devices/device_xiaomi_rosemary synced 2026-01-27 18:07:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

rosemary: sepolicy: Address mi_thermald sepolicy denials

Browse Source 
This is a squash of the following commits:

cannon: sepolicy: Label mi_thermald and grant required permissions

Change-Id: I9eebb3c911f27aaeb128696c261d902a06c52cef
Co-Authored-By: Azurite <azuritenoah@gmail.com>
Signed-off-by: LinkBoi00 <linkdevel@protonmail.com>
Reviewed-on: https://review.statixos.com/c/android_device_xiaomi_cannon/+/7756
Reviewed-by: Vaisakh Murali <mvaisakh@statixos.com>
Tested-by: Vaisakh Murali <mvaisakh@statixos.com>
Signed-off-by: LinkBoi00 <linkdevel@protonmail.com>

cannon: sepolicy: Drop sysfs_battery_supply sepolicy rules

Ref: https://gerrit.pixelexperience.org/c/device_mediatek_sepolicy_vndr/+/12410/1

Change-Id: Id0af2893e4ab4229ab9aa7f91c66359e878616a2
Signed-off-by: Zinadin Zidan <zidan44@pixelexperience.org>
Signed-off-by: LinkBoi00 <linkdevel@protonmail.com>
Reviewed-on: https://review.statixos.com/c/android_device_xiaomi_cannon/+/7757
Reviewed-by: Vaisakh Murali <mvaisakh@statixos.com>
Tested-by: Vaisakh Murali <mvaisakh@statixos.com>
Signed-off-by: LinkBoi00 <linkdevel@protonmail.com>

cannon: sepolicy: Allow mi_thermald to read thermal and cpu conf

Change-Id: I3bd838967f40fbbfa149c8aa8258ed8511d9dd50
Signed-off-by: Zinadin Zidan <zidan44@pixelexperience.org>
Signed-off-by: LinkBoi00 <linkdevel@protonmail.com>
Reviewed-on: https://review.statixos.com/c/android_device_xiaomi_cannon/+/7758
Reviewed-by: Vaisakh Murali <mvaisakh@statixos.com>
Tested-by: Vaisakh Murali <mvaisakh@statixos.com>
Signed-off-by: LinkBoi00 <linkdevel@protonmail.com>

cannon: sepolicy: Allow mi_thermald to access sysfs_leds

Change-Id: Ie861d1797be99b5b22fb3927f71be388e835a3e8
Signed-off-by: Zinadin Zidan <zidan44@pixelexperience.org>
Signed-off-by: LinkBoi00 <linkdevel@protonmail.com>
Reviewed-on: https://review.statixos.com/c/android_device_xiaomi_cannon/+/7759
Reviewed-by: Vaisakh Murali <mvaisakh@statixos.com>
Tested-by: Vaisakh Murali <mvaisakh@statixos.com>
Signed-off-by: LinkBoi00 <linkdevel@protonmail.com>
This commit is contained in:
Zinadin Zidan
2021-03-06 13:27:23 +06:00
committed by Matsvei Niaverau
parent 723cde3fdc
commit d393577b30
3 changed files with 34 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
sepolicy/vendor/file_contexts vendored
View File

@@ -9,5 +9,8 @@
# Lights
/(vendor|system/vendor)/bin/hw/android\.hardware\.light-service\.rosemary u:object_r:hal_light_default_exec:s0
# Thermals
/vendor/bin/mi_thermald u:object_r:mi_thermald_exec:s0
# WiFi
/(vendor|system/vendor)/bin/hw/android\.hardware\.wifi@[0-9]\.[0-9]-service-lazy\.rosemary u:object_r:hal_wifi_default_exec:s0

28
sepolicy/vendor/mi_thermald.te vendored Normal file
View File

@@ -0,0 +1,28 @@
type mi_thermald, domain;
type mi_thermald_exec, exec_type, vendor_file_type, file_type;
type thermal_data_file, data_file_type, file_type;
init_daemon_domain(mi_thermald)
set_prop(mi_thermald, thermal_engine_prop)
allow mi_thermald thermal_data_file:dir rw_dir_perms;
allow mi_thermald thermal_data_file:file create_file_perms;
allow mi_thermald self:capability { fsetid sys_boot };
allow mi_thermald mi_thermald:capability { chown fowner };
allow mi_thermald mi_thermald:capability2 { wake_alarm block_suspend };
r_dir_file(mi_thermald, sysfs_therm)
allow mi_thermald sysfs_therm:file w_file_perms;
r_dir_file(mi_thermald, sysfs_thermal)
allow mi_thermald sysfs_thermal:file w_file_perms;
r_dir_file(mi_thermald, sysfs)
allow mi_thermald sysfs:file w_file_perms;
r_dir_file(mi_thermald, sysfs_leds)
allow mi_thermald sysfs_leds:file w_file_perms;
allow mi_thermald sysfs_devices_system_cpu:file rw_file_perms;

3
sepolicy/vendor/property_contexts vendored
View File

@@ -17,3 +17,6 @@ gf.debug.dump_bigdata_data u:object_r:vendor_finger
persist.sys.fp.goodix. u:object_r:vendor_fingerprint_prop:s0
persist.vendor.sys.fp. u:object_r:vendor_fingerprint_prop:s0
vendor.fps_hal. u:object_r:vendor_fingerprint_prop:s0
# Thermal
vendor.sys.thermal. u:object_r:thermal_engine_prop:s0