davinci: sepolicy: Add vendor prefix to avoid naming colision

Change-Id: I44e851a1957aac4abc17a367db2da543c0bab81c
This commit is contained in:
daniml3
2020-10-12 12:52:17 +02:00
committed by Arian
parent b9e3c08b9f
commit 1e749669de
13 changed files with 30 additions and 30 deletions

View File

@@ -1 +1 @@
r_dir_file(adsprpcd sysfs_graphics)
r_dir_file(vendor_adsprpcd vendor_sysfs_graphics)

View File

@@ -2,7 +2,7 @@
/mnt/vendor/persist/camera(/.*)? u:object_r:camera_persist_file:s0
# Display
/sys/devices/platform/soc/[a-f0-9]+.qcom,mdss_mdp/drm/card([0-3])+/card([0-3])+-DSI-1/panel_info u:object_r:sysfs_graphics:s0
/sys/devices/platform/soc/[a-f0-9]+.qcom,mdss_mdp/drm/card([0-3])+/card([0-3])+-DSI-1/panel_info u:object_r:vendor_sysfs_graphics:s0
/sys/devices/platform/soc/soc:qcom,dsi-display/fod_ui u:object_r:sysfs_fod:s0
/sys/devices/platform/soc/soc:qcom,dsi-display/hbm u:object_r:sysfs_hbm:s0
@@ -25,7 +25,7 @@
/vendor/bin/remosaic_daemon u:object_r:remosaic_daemon_exec:s0
# WiFi
/vendor/bin/nv_mac u:object_r:wcnss_service_exec:s0
/vendor/bin/nv_mac u:object_r:vendor_wcnss_service_exec:s0
# Touchfeature
/dev/xiaomi-touch u:object_r:touchfeature_device:s0

View File

@@ -1,3 +1,3 @@
# LED
genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-05/c440000.qcom,spmi:qcom,pm6150l@5:qcom,leds@d000/leds/left u:object_r:sysfs_graphics:s0
genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-05/c440000.qcom,spmi:qcom,pm6150l@5:qcom,leds@d000/leds/right u:object_r:sysfs_graphics:s0
genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-05/c440000.qcom,spmi:qcom,pm6150l@5:qcom,leds@d000/leds/left u:object_r:vendor_sysfs_graphics:s0
genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-05/c440000.qcom,spmi:qcom,pm6150l@5:qcom,leds@d000/leds/right u:object_r:vendor_sysfs_graphics:s0

View File

@@ -1,7 +1,7 @@
type audio_socket, file_type;
allow hal_audio_default mnt_vendor_file:dir search;
r_dir_file(hal_audio_default, persist_audio_file)
r_dir_file(hal_audio_default, vendor_persist_audio_file)
set_prop(hal_audio_default, vendor_audio_prop)

View File

@@ -4,7 +4,7 @@ hal_client_domain(hal_camera_default, hal_power)
allow hal_camera_default proc_meminfo:file r_file_perms;
r_dir_file(hal_camera_default, sysfs_kgsl)
r_dir_file(hal_camera_default, vendor_sysfs_kgsl)
r_dir_file(hal_camera_default, camera_persist_file)
r_dir_file(hal_camera_default, mnt_vendor_file)

View File

@@ -7,16 +7,16 @@ allow hal_fingerprint_default fingerprint_device:chr_file rw_file_perms;
allow hal_fingerprint_default fingerprint_data_file:dir create_dir_perms;
allow hal_fingerprint_default fingerprint_data_file:file create_file_perms;
allow hal_fingerprint_default input_device:chr_file rw_file_perms;
allow hal_fingerprint_default qdsp_device:chr_file r_file_perms;
allow hal_fingerprint_default vendor_qdsp_device:chr_file r_file_perms;
allow hal_fingerprint_default self:netlink_socket create_socket_perms_no_ioctl;
allow hal_fingerprint_default tee_device:chr_file rw_file_perms;
allow hal_fingerprint_default uhid_device:chr_file rw_file_perms;
allow hal_fingerprint_default xdsp_device:chr_file r_file_perms;
allow hal_fingerprint_default vendor_xdsp_device:chr_file r_file_perms;
r_dir_file(hal_fingerprint_default, firmware_file)
get_prop(hal_fingerprint_default, vendor_adsprpc_prop)
set_prop(hal_fingerprint_default, vendor_fp_prop)
hal_client_domain(hal_fingerprint_default, hal_perf)
hal_client_domain(hal_fingerprint_default, vendor_hal_perf)
add_hwservice(hal_fingerprint_default, hal_fingerprint_hwservice_xiaomi)

View File

@@ -1,7 +1,7 @@
type sysfs_fod, sysfs_type, fs_type;
allow hal_lineage_fod_default sysfs_fod:file rw_file_perms;
allow hal_lineage_fod_default sysfs_graphics:file rw_file_perms;
allow hal_lineage_fod_default vendor_sysfs_graphics:file rw_file_perms;
allow hal_lineage_fod_default hal_fingerprint_hwservice_xiaomi:hwservice_manager find;
allow hal_lineage_fod_default hal_touchfeature_hwservice_xiaomi:hwservice_manager find;

View File

@@ -18,8 +18,8 @@ allow hal_motor_client hal_motor_hwservice_xiaomi:hwservice_manager find;
allow hal_motor_default hall_device:chr_file rw_file_perms;
allow hal_motor_default motor_device:chr_file rw_file_perms;
allow hal_motor_default persist_sensors_file:dir rw_dir_perms;
allow hal_motor_default persist_sensors_file:file rw_file_perms;
allow hal_motor_default vendor_persist_sensors_file:dir rw_dir_perms;
allow hal_motor_default vendor_persist_sensors_file:file rw_file_perms;
allow hal_motor_default mnt_vendor_file:dir { search };

View File

@@ -1,2 +1,2 @@
allow hal_nfc_default nfc_vendor_data_file:dir create_dir_perms;
allow hal_nfc_default nfc_vendor_data_file:file create_file_perms;
allow hal_nfc_default vendor_nfc_vendor_data_file:dir create_dir_perms;
allow hal_nfc_default vendor_nfc_vendor_data_file:file create_file_perms;

View File

@@ -25,14 +25,14 @@ allow mi_thermald sysfs:file w_file_perms;
r_dir_file(mi_thermald, sysfs_leds)
allow mi_thermald sysfs_kgsl:dir r_dir_perms;
allow mi_thermald sysfs_kgsl:file rw_file_perms;
allow mi_thermald sysfs_kgsl:lnk_file r_file_perms;
allow mi_thermald vendor_sysfs_kgsl:dir r_dir_perms;
allow mi_thermald vendor_sysfs_kgsl:file rw_file_perms;
allow mi_thermald vendor_sysfs_kgsl:lnk_file r_file_perms;
allow mi_thermald sysfs_battery_supply:dir r_dir_perms;
allow mi_thermald sysfs_battery_supply:file rw_file_perms;
allow mi_thermald sysfs_battery_supply:lnk_file r_file_perms;
allow mi_thermald vendor_sysfs_battery_supply:dir r_dir_perms;
allow mi_thermald vendor_sysfs_battery_supply:file rw_file_perms;
allow mi_thermald vendor_sysfs_battery_supply:lnk_file r_file_perms;
allow mi_thermald sysfs_graphics:dir r_dir_perms;
allow mi_thermald sysfs_graphics:file rw_file_perms;
allow mi_thermald sysfs_graphics:lnk_file r_file_perms;
allow mi_thermald vendor_sysfs_graphics:dir r_dir_perms;
allow mi_thermald vendor_sysfs_graphics:file rw_file_perms;
allow mi_thermald vendor_sysfs_graphics:lnk_file r_file_perms;

View File

@@ -1 +1 @@
r_dir_file(sensors, sysfs_graphics)
r_dir_file(vendor_sensors, vendor_sysfs_graphics)

View File

@@ -2,6 +2,6 @@ allow system_app hal_motor_hwservice_xiaomi:hwservice_manager find;
binder_call(system_app, hal_motor)
allow system_app { motor_device sysfs_graphics sysfs_leds }:dir search;
allow system_app { cgroup sysfs_graphics }:file rw_file_perms;
allow system_app { motor_device sysfs_graphics hall_device }:chr_file rw_file_perms;
allow system_app { motor_device vendor_sysfs_graphics sysfs_leds }:dir search;
allow system_app { cgroup vendor_sysfs_graphics }:file rw_file_perms;
allow system_app { motor_device vendor_sysfs_graphics hall_device }:chr_file rw_file_perms;

View File

@@ -1,2 +1,2 @@
allow wcnss_service vendor_data_file:dir create_dir_perms;
allow wcnss_service vendor_data_file:file create_file_perms;
allow vendor_wcnss_service vendor_data_file:dir create_dir_perms;
allow vendor_wcnss_service vendor_data_file:file create_file_perms;