asgardius/android_device_samsung_msm8996-common
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
android_device_samsung_msm8.../sepolicy/file_contexts

199 lines
14 KiB
Text
Raw Normal View History

gts3l: selinux: Overwrite files from gts4lv-common with tiny edits Because it is much similar to use the same family Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: Ic988274c7848c6ea0c9949b8caa63495515c1804
2021-05-20 17:15:59 +02:00
# Block devices
/dev/block/platform/soc/624000\.sdhci/by-name/bota u:object_r:botablk_device:s0
/dev/block/platform/soc/624000\.sdhci/by-name/config u:object_r:frp_block_device:s0
/dev/block/platform/soc/624000\.sdhci/by-name/debug u:object_r:debug_block_device:s0
/dev/block/platform/soc/624000\.sdhci/by-name/dsp u:object_r:dsp_block_device:s0
/dev/block/platform/soc/624000\.sdhci/by-name/dtbo u:object_r:boot_block_device:s0
/dev/block/platform/soc/624000\.sdhci/by-name/efs u:object_r:efsblk_device:s0
/dev/block/platform/soc/624000\.sdhci/by-name/hidden u:object_r:hiddenblk_device:s0
/dev/block/platform/soc/624000\.sdhci/by-name/omr u:object_r:omr_block_device:s0
/dev/block/platform/soc/624000\.sdhci/by-name/param u:object_r:paramblk_device:s0
/dev/block/platform/soc/624000\.sdhci/by-name/persistent u:object_r:frp_block_device:s0
/dev/block/platform/soc/624000\.sdhci/by-name/sec_efs u:object_r:sec_efsblk_device:s0
/dev/block/platform/soc/624000\.sdhci/by-name/steady u:object_r:steady_block_device:s0
/dev/block/platform/soc/624000\.sdhci/by-name/vbmeta u:object_r:boot_block_device:s0
/dev/block/platform/soc/624000\.sdhci/by-name/vendor u:object_r:system_block_device:s0
init for lineage-15.1
2018-07-19 12:48:02 +02:00
gts3l: selinux: Overwrite files from gts4lv-common with tiny edits Because it is much similar to use the same family Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: Ic988274c7848c6ea0c9949b8caa63495515c1804
2021-05-20 17:15:59 +02:00
# Binaries
/(vendor|system/vendor)/bin/hw/macloader u:object_r:macloader_exec:s0
/(vendor|system/vendor)/bin/secril_config_svc u:object_r:secril_config_svc_exec:s0
init for lineage-15.1
2018-07-19 12:48:02 +02:00
Update SEPolicy files from LineageOS/xiaomi_msm8996-common Surely this is not perfect for gts3l boards Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: Ibdf84561980b6223be485579d330d9d8b3cdafb7
2021-05-12 17:13:32 +02:00
# Data files
gts3l-common: camera: Use vendor camera HAL But the camera doesn't work yet Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: Ib34345c502a37e87476cf3cf057455bfe4158bda
2021-08-03 18:33:20 +02:00
/data/camera(/.*)? u:object_r:camera_socket:s0
gts3l: selinux: Overwrite files from gts4lv-common with tiny edits Because it is much similar to use the same family Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: Ic988274c7848c6ea0c9949b8caa63495515c1804
2021-05-20 17:15:59 +02:00
/data/vendor/biometrics(/.*)? u:object_r:biometrics_vendor_data_file:s0
/data/vendor/conn(/.*)? u:object_r:vendor_convergence_data_file:s0
/data/vendor/gps(/.*)? u:object_r:vendor_gps_file:s0
/data/vendor/log(/.*)? u:object_r:vendor_log_file:s0
/data/vendor/log/audiopcm(/.*)? u:object_r:vendor_audiopcm_data_file:s0
/data/vendor/secradio(/.*)? u:object_r:vendor_radio_data_file:s0
init q
2019-10-11 14:28:34 +02:00
gts3l: selinux: Overwrite files from gts4lv-common with tiny edits Because it is much similar to use the same family Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: Ic988274c7848c6ea0c9949b8caa63495515c1804
2021-05-20 17:15:59 +02:00
# Devices
/dev/android_rndis_qc u:object_r:radio_device:s0
/dev/cdma_.* u:object_r:radio_device:s0
/dev/dbmdx-[0-9]+ u:object_r:audio_device:s0
/dev/dun u:object_r:dun_device:s0
/dev/esfp[0-9]+ u:object_r:fp_sensor_device:s0
/dev/gsm_.* u:object_r:radio_device:s0
/dev/link_pm u:object_r:radio_device:s0
/dev/mdm u:object_r:radio_device:s0
/dev/network_latency u:object_r:radio_device:s0
/dev/network_throughput u:object_r:radio_device:s0
/dev/nmea u:object_r:radio_device:s0
/dev/qmi[0-9]* u:object_r:radio_device:s0
/dev/tzic u:object_r:tz_device:s0
Revert "SELinux: Remove bt_firmware, firmware things that are not used" This reverts commit 6f77aed40cf8442c4bd69938e5e920dae7d73291. Change-Id: Id8598f456fb8510b873b16fa392dae2cd70af98f
2021-05-13 13:00:51 +02:00
gts3l: selinux: Overwrite files from gts4lv-common with tiny edits Because it is much similar to use the same family Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: Ic988274c7848c6ea0c9949b8caa63495515c1804
2021-05-20 17:15:59 +02:00
# EFS files
/efs/\.drm(/.*)? u:object_r:drm_efs_file:s0
/efs/\.nv_core\.bak(.*) u:object_r:nv_core_efs_file:s0
/efs/afc(/.*)? u:object_r:sec_efs_file:s0
/efs/apn-changes\.xml u:object_r:sec_efs_file:s0
/efs/Battery(/.*)? u:object_r:battery_efs_file:s0
/efs/bench(/.*)? u:object_r:sec_efs_file:s0
/efs/biometrics(/.*)? u:object_r:sec_efs_file:s0
/efs/bluetooth(/.*)? u:object_r:bluetooth_efs_file:s0
/efs/calibration_data u:object_r:sec_efs_file:s0
/efs/CamMotorSlideCnt u:object_r:app_efs_file:s0
/efs/carrier(/.*)? u:object_r:carrier_efs_file:s0
/efs/cpk(/.*)? u:object_r:cpk_efs_file:s0
/efs/DAK(/.*)? u:object_r:prov_efs_file:s0
/efs/drm(/.*)? u:object_r:drm_efs_file:s0
/efs/drx(/.*)? u:object_r:sec_efs_file:s0
/efs/dsms(/.*)? u:object_r:dsms_efs_file:s0
/efs/etc/poc(/.*)? u:object_r:sec_poc_file:s0
/efs/FactoryApp(/.*)? u:object_r:app_efs_file:s0
/efs/gatekeeper(/.*)? u:object_r:gatekeeper_efs_file:s0
/efs/grip_cal_data u:object_r:sec_efs_file:s0
/efs/gyro_cal_data u:object_r:sec_efs_file:s0
/efs/hw_offset u:object_r:sec_efs_file:s0
/efs/imei(/.*)? u:object_r:imei_efs_file:s0
/efs/ims_setting(/.*)? u:object_r:sec_efs_file:s0
/efs/iss(/.*)? u:object_r:iss_efs_file:s0
/efs/logguard(/.*)? u:object_r:iss_efs_file:s0
/efs/lpm(/.*)? u:object_r:sec_efs_file:s0
/efs/maxim(/.*)? u:object_r:sec_efs_file:s0
/efs/mb_po(/.*)? u:object_r:mb_po_efs_file:s0
/efs/mc(/.*)? u:object_r:prov_efs_file:s0
/efs/misc(/.*)? u:object_r:sec_efs_file:s0
/efs/nfc(/.*)? u:object_r:nfc_efs_file:s0
/efs/nv_data\.bin(.*) u:object_r:bin_nv_data_efs_file:s0
/efs/nv_fsm_data\.bin u:object_r:bin_nv_data_efs_file:s0
/efs/nxp(/.*)? u:object_r:sec_efs_file:s0
/efs/osc_trim u:object_r:sec_efs_file:s0
/efs/otadm(/.*)? u:object_r:otadm_efs_file:s0
/efs/otadm_sw_version u:object_r:otadm_efs_file:s0
/efs/pdp_bkup(/.*)? u:object_r:pdp_efs_file:s0
/efs/pfw_data(/.*)? u:object_r:pfw_efs_file:s0
/efs/prov(/.*)? u:object_r:prov_efs_file:s0
/efs/prov_data(/.*)? u:object_r:prov_efs_file:s0
/efs/prox_cal u:object_r:sec_efs_file:s0
/efs/qualcomm(/.*)? u:object_r:sec_efs_file:s0
/efs/recovery(/.*)? u:object_r:sec_efs_file:s0
/efs/richtek(/.*)? u:object_r:sec_efs_file:s0
/efs/root(/.*)? u:object_r:app_efs_file:s0
/efs/sec_efs(/.*)? u:object_r:sec_efs_file:s0
/efs/sec_efs/iss/.policy_config u:object_r:sec_efs_file:s0
/efs/sec_efs/kpm(/.*)? u:object_r:kpm_efs_file:s0
/efs/sec_efs/retailmode(/.*)? u:object_r:retailmode_efs_file:s0
/efs/security(/.*)? u:object_r:prov_efs_file:s0
/efs/sktdm_mem(/.*)? u:object_r:sec_efs_file:s0
/efs/SlideCount u:object_r:app_efs_file:s0
/efs/SMS(/.*)? u:object_r:sec_efs_file:s0
/efs/snap(/.*)? u:object_r:snap_efs_file:s0
/efs/snapsec(/.*)? u:object_r:snapsec_efs_file:s0
/efs/ssm(/.*)? u:object_r:ssm_efs_file:s0
/efs/tas25xx(/.*)? u:object_r:sec_efs_file:s0
/efs/TEE(/.*)? u:object_r:prov_efs_file:s0
/efs/tee(/.*)? u:object_r:tee_efs_file:s0
/efs/usb_hw_param(/.*)? u:object_r:sec_efs_file:s0
/efs/vk(/.*)? u:object_r:vaultkeeper_efs_file:s0
/efs/vold(/.*)? u:object_r:sec_efs_file:s0
/efs/wifi(/.*)? u:object_r:wifi_efs_file:s0
/efs/wv\.keys u:object_r:sec_efs_file:s0
/efs_gsm(/.*)? u:object_r:efs_gsm_file:s0
/mnt/vendor/efs(/.*)? u:object_r:efs_file:s0
/mnt/vendor/efs/\.drm(/.*)? u:object_r:drm_efs_file:s0
/mnt/vendor/efs/\.nv_core\.bak(.*) u:object_r:nv_core_efs_file:s0
/mnt/vendor/efs/Battery(/.*)? u:object_r:battery_efs_file:s0
/mnt/vendor/efs/bench(/.*)? u:object_r:sec_efs_file:s0
/mnt/vendor/efs/bluetooth(/.*)? u:object_r:bluetooth_efs_file:s0
/mnt/vendor/efs/calibration_data u:object_r:sec_efs_file:s0
/mnt/vendor/efs/carrier(/.*)? u:object_r:carrier_efs_file:s0
/mnt/vendor/efs/cirrus(/.*)? u:object_r:sec_efs_file:s0
/mnt/vendor/efs/cpk(/.*)? u:object_r:cpk_efs_file:s0
/mnt/vendor/efs/DAK(/.*)? u:object_r:prov_efs_file:s0
/mnt/vendor/efs/drm(/.*)? u:object_r:drm_efs_file:s0
/mnt/vendor/efs/drx(/.*)? u:object_r:sec_efs_file:s0
/mnt/vendor/efs/etc/poc(/.*)? u:object_r:sec_poc_file:s0
/mnt/vendor/efs/FactoryApp(/.*)? u:object_r:app_efs_file:s0
/mnt/vendor/efs/grip_cal_data u:object_r:sec_efs_file:s0
/mnt/vendor/efs/gyro_cal_data u:object_r:sec_efs_file:s0
/mnt/vendor/efs/hw_offset u:object_r:sec_efs_file:s0
/mnt/vendor/efs/imei(/.*)? u:object_r:imei_efs_file:s0
/mnt/vendor/efs/ims_setting(/.*)? u:object_r:sec_efs_file:s0
/mnt/vendor/efs/iss(/.*)? u:object_r:iss_efs_file:s0
/mnt/vendor/efs/logguard(/.*)? u:object_r:iss_efs_file:s0
/mnt/vendor/efs/maxim(/.*)? u:object_r:sec_efs_file:s0
/mnt/vendor/efs/mc(/.*)? u:object_r:prov_efs_file:s0
/mnt/vendor/efs/misc(/.*)? u:object_r:sec_efs_file:s0
/mnt/vendor/efs/nv_data\.bin(.*) u:object_r:bin_nv_data_efs_file:s0
/mnt/vendor/efs/nv_fsm_data\.bin u:object_r:bin_nv_data_efs_file:s0
/mnt/vendor/efs/nxp(/.*)? u:object_r:sec_efs_file:s0
/mnt/vendor/efs/osc_trim u:object_r:sec_efs_file:s0
/mnt/vendor/efs/otadm(/.*)? u:object_r:otadm_efs_file:s0
/mnt/vendor/efs/otadm_sw_version u:object_r:otadm_efs_file:s0
/mnt/vendor/efs/pfw_data(/.*)? u:object_r:pfw_efs_file:s0
/mnt/vendor/efs/pn-changes\.xml u:object_r:sec_efs_file:s0
/mnt/vendor/efs/prov(/.*)? u:object_r:prov_efs_file:s0
/mnt/vendor/efs/prov_data(/.*)? u:object_r:prov_efs_file:s0
/mnt/vendor/efs/prox_cal u:object_r:sec_efs_file:s0
/mnt/vendor/efs/qualcomm(/.*)? u:object_r:sec_efs_file:s0
/mnt/vendor/efs/recovery(/.*)? u:object_r:sec_efs_file:s0
/mnt/vendor/efs/richtek(/.*)? u:object_r:sec_efs_file:s0
/mnt/vendor/efs/root(/.*)? u:object_r:app_efs_file:s0
/mnt/vendor/efs/sec_efs(/.*)? u:object_r:sec_efs_file:s0
/mnt/vendor/efs/sec_efs/iss/.policy_config u:object_r:sec_efs_file:s0
/mnt/vendor/efs/sec_efs/retailmode(/.*)? u:object_r:retailmode_efs_file:s0
/mnt/vendor/efs/security(/.*)? u:object_r:prov_efs_file:s0
/mnt/vendor/efs/sktdm_mem(/.*)? u:object_r:sec_efs_file:s0
/mnt/vendor/efs/SlideCount u:object_r:app_efs_file:s0
/mnt/vendor/efs/SMS(/.*)? u:object_r:sec_efs_file:s0
/mnt/vendor/efs/TEE(/.*)? u:object_r:prov_efs_file:s0
/mnt/vendor/efs/tee(/.*)? u:object_r:tee_efs_file:s0
/mnt/vendor/efs/usb_hw_param(/.*)? u:object_r:sec_efs_file:s0
/mnt/vendor/efs/vk(/.*)? u:object_r:vaultkeeper_efs_file:s0
/mnt/vendor/efs/vold(/.*)? u:object_r:sec_efs_file:s0
/mnt/vendor/efs/wifi(/.*)? u:object_r:wifi_efs_file:s0
/mnt/vendor/efs/wv\.keys u:object_r:sec_efs_file:s0
update sepolicy
2019-12-06 11:18:49 +01:00
init q
2019-10-11 14:28:34 +02:00
# HALs
Add SEPolicy for Samsung stuffs from LineageOS/samsung_gts4lv-common This surely not working perfectly Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: I1d3ecc0f379e772909ff7f51640eedb2156af257
2021-05-12 17:30:42 +02:00
/(vendor|system/vendor)/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.1-service\.samsung u:object_r:hal_fingerprint_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.health@2\.0-service\.samsung u:object_r:hal_health_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@4\.0-service\.samsung u:object_r:hal_keymaster_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.light@2\.0-service\.samsung u:object_r:hal_light_default_exec:s0
SELinux: file_contexts: Edit vendor names Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: I250809ac51f84905191a8160e0ff2f90a7c36aa1
2021-05-13 09:42:55 +02:00
/(vendor|system/vendor)/bin/hw/android\.hardware\.usb@1\.1-service\.gts3l u:object_r:hal_usb_default_exec:s0
Add SEPolicy for Samsung stuffs from LineageOS/samsung_gts4lv-common This surely not working perfectly Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: I1d3ecc0f379e772909ff7f51640eedb2156af257
2021-05-12 17:30:42 +02:00
/(vendor|system/vendor)/bin/hw/vendor\.lineage\.livedisplay@2\.0-service\.samsung-qcom u:object_r:hal_lineage_livedisplay_sysfs_exec:s0
SELinux: hwservice: Add type for hal_miscpower Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: I02f15eba26d9491ff694e6076c0fa4d90a5532a0
2021-05-13 10:50:24 +02:00
/(vendor|system/vendor)/bin/hw/vendor\.samsung\.hardware\.miscpower@1\.0-service u:object_r:hal_power_default_exec:s0
SELinux: Remove ir things and tiny clean up Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: Iffe986d9b385e973919b690da95221395f031819
2021-05-13 09:47:15 +02:00
gts3l: selinux: Overwrite files from gts4lv-common with tiny edits Because it is much similar to use the same family Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: Ic988274c7848c6ea0c9949b8caa63495515c1804
2021-05-20 17:15:59 +02:00
# Rootfs
gts3l: sepolicy: Add firmware-modem file, type and remove genfs Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: Iabcae1835c39e630d672f48c3cce3ca128fdc233
2021-05-20 19:46:12 +02:00
/firmware(/.*)? u:object_r:firmware_file:s0
gts3l: fs: Mount and link properly to fit into MSM8996 family Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: Id8822e02bcc0755a506126e4a1d7d5a1232d6082
2021-05-30 15:16:43 +02:00
/firmware_mnt(/.*)? u:object_r:firmware_file:s0
gts3l: sepolicy: Add firmware-modem file, type and remove genfs Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: Iabcae1835c39e630d672f48c3cce3ca128fdc233
2021-05-20 19:46:12 +02:00
/firmware-modem(/.*)? u:object_r:firmware-modem_file:s0
gts3l: fs: Mount and link properly to fit into MSM8996 family Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: Id8822e02bcc0755a506126e4a1d7d5a1232d6082
2021-05-30 15:16:43 +02:00
/bt_firmware(/.*)? u:object_r:bt_firmware_file:s0
gts3l: sepolicy: Add firmware-modem file, type and remove genfs Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: Iabcae1835c39e630d672f48c3cce3ca128fdc233
2021-05-20 19:46:12 +02:00
/omr(/.*)? u:object_r:omr_file:s0
gts3l: Fix build error Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: I3d42609f3d7d7d63bb7b6394bddcb3afea671d91
2021-05-24 17:25:57 +02:00
/persist(/.*)? u:object_r:persist_file:s0
SELinux: Remove ir things and tiny clean up Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: Iffe986d9b385e973919b690da95221395f031819
2021-05-13 09:47:15 +02:00
gts3l: selinux: Overwrite files from gts4lv-common with tiny edits Because it is much similar to use the same family Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: Ic988274c7848c6ea0c9949b8caa63495515c1804
2021-05-20 17:15:59 +02:00
# Sys
/sys/class/camera(/.*)? -- u:object_r:sysfs_camera_writable:s0
/sys/class/lcd(/.*)? -- u:object_r:sysfs_lcd_writable:s0
/sys/class/power_supply(/.*)? -- u:object_r:sysfs_batteryinfo:s0
/sys/class/power_supply/battery(/.*)? -- u:object_r:sysfs_batteryinfo:s0
/sys/class/rfkill/rfkill[0-9]+/state -- u:object_r:sysfs_bluetooth_writable:s0
/sys/class/rfkill/rfkill[0-9]+/type -- u:object_r:sysfs_bluetooth_writable:s0
/sys/devices/platform/soc/soc:battery/power_supply(/.*)? -- u:object_r:sysfs_batteryinfo:s0
/sys/devices/virtual/audio/earjack/state u:object_r:sysfs_audio_writable:s0
gts3l-common: camera: Use vendor camera HAL But the camera doesn't work yet Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: Ib34345c502a37e87476cf3cf057455bfe4158bda
2021-08-03 18:33:20 +02:00
/sys/devices/virtual/camera(/.*)? u:object_r:sysfs_camera_writable:s0
gts3l: selinux: Overwrite files from gts4lv-common with tiny edits Because it is much similar to use the same family Signed-off-by: Deokgyu Yang <secugyu@gmail.com> Change-Id: Ic988274c7848c6ea0c9949b8caa63495515c1804
2021-05-20 17:15:59 +02:00
/sys/devices/virtual/fingerprint/fingerprint(/.*)? u:object_r:sysfs_fpc:s0
/sys/devices/virtual/lcd/panel(/.*)? u:object_r:sysfs_lcd_writable:s0
/sys/devices/virtual/mdnie(/.*)? -- u:object_r:sysfs_mdnie_writable:s0
/sys/devices/virtual/sec/tsp(/.*)? u:object_r:sysfs_tsp:s0
Reference in a new issue Copy permalink