From 3554a74545a83dab96efb9204ecfc824382a2e3f Mon Sep 17 00:00:00 2001 From: Michael Bestas Date: Fri, 17 Jun 2022 22:57:27 +0300 Subject: [PATCH] sdm710-common: sepolicy: Fix fingerprint labels Change-Id: I66188247ce9268929763236c0ac2fa483273f1cc --- sepolicy/vendor/file.te | 2 +- sepolicy/vendor/file_contexts | 8 ++++---- sepolicy/vendor/hal_fingerprint_default.te | 2 ++ sepolicy/vendor/tee.te | 2 ++ 4 files changed, 9 insertions(+), 5 deletions(-) diff --git a/sepolicy/vendor/file.te b/sepolicy/vendor/file.te index ae3cf0d..b9e531e 100644 --- a/sepolicy/vendor/file.te +++ b/sepolicy/vendor/file.te @@ -4,7 +4,7 @@ type debugfs_sched_features, debugfs_type, fs_type; type debugfs_wlan, debugfs_type, fs_type; -type fingerprint_data_file, data_file_type, file_type; +type fingerprint_data_file, data_file_type, core_data_file_type, file_type; type gps_data_file, data_file_type, file_type; diff --git a/sepolicy/vendor/file_contexts b/sepolicy/vendor/file_contexts index 8731fb8..b976de5 100644 --- a/sepolicy/vendor/file_contexts +++ b/sepolicy/vendor/file_contexts @@ -18,10 +18,10 @@ # Fingerprint data /data/gf_data(/.*)? u:object_r:fingerprint_data_file:s0 -/data/vendor/fpc(/.*)? u:object_r:fingerprint_data_file:s0 -/data/vendor/fpdump(/.*)? u:object_r:fingerprint_data_file:s0 -/data/vendor/goodix(/.*)? u:object_r:fingerprint_data_file:s0 -/data/vendor/syna(/.*)? u:object_r:fingerprint_data_file:s0 +/data/vendor/fpc(/.*)? u:object_r:fingerprint_vendor_data_file:s0 +/data/vendor/fpdump(/.*)? u:object_r:fingerprint_vendor_data_file:s0 +/data/vendor/goodix(/.*)? u:object_r:fingerprint_vendor_data_file:s0 +/data/vendor/syna(/.*)? u:object_r:fingerprint_vendor_data_file:s0 /mnt/vendor/persist/goodix(/.*)? u:object_r:persist_fingerprint_file:s0 # Fingerprint devices diff --git a/sepolicy/vendor/hal_fingerprint_default.te b/sepolicy/vendor/hal_fingerprint_default.te index 867c96a..599a5eb 100644 --- a/sepolicy/vendor/hal_fingerprint_default.te +++ b/sepolicy/vendor/hal_fingerprint_default.te @@ -1,3 +1,5 @@ +typeattribute hal_fingerprint_default data_between_core_and_vendor_violators; + allow hal_fingerprint_default fingerprint_device:chr_file rw_file_perms; allow hal_fingerprint_default fingerprint_data_file:dir create_dir_perms; allow hal_fingerprint_default fingerprint_data_file:file create_file_perms; diff --git a/sepolicy/vendor/tee.te b/sepolicy/vendor/tee.te index 5a58e14..0e4d89a 100644 --- a/sepolicy/vendor/tee.te +++ b/sepolicy/vendor/tee.te @@ -1,3 +1,5 @@ +typeattribute tee data_between_core_and_vendor_violators; + allow tee fingerprint_data_file:dir create_dir_perms; allow tee fingerprint_data_file:file create_file_perms;