Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Unverified Commit cde5a731 authored by Rohit Sekhar's avatar Rohit Sekhar Committed by Michael Bestas
Browse files

FP5: sepolicy: Initial rules 



Co-authored-by: default avatarMichael Bestas <mkbestas@lineageos.org>
Co-authored-by: default avatarTommy Webb <tommy@calyxinstitute.org>
Change-Id: Ie5544499e7341a817f3b0352693abf0093b6e80a
parent b0b46009

BoardConfig.mk

+0 −1
Original line number Diff line number Diff line
@@ -165,7 +165,6 @@ VENDOR_SECURITY_PATCH := 2024-03-05 
# SEPolicy

include device/qcom/sepolicy_vndr/SEPolicy.mk

BOARD_VENDOR_SEPOLICY_DIRS += $(DEVICE_PATH)/sepolicy/vendor

SYSTEM_EXT_PRIVATE_SEPOLICY_DIRS += $(DEVICE_PATH)/sepolicy/private



# Verified Boot

BOARD_AVB_ENABLE := true

sepolicy/private/property_contexts

deleted100644 → 0
+0 −2
Original line number Diff line number Diff line 
# Radio

persist.ril.sim.mcc.mnc u:object_r:radio_prop:s0

sepolicy/vendor/attributes

0 → 100644
+3 −0
Original line number Diff line number Diff line 
attribute hal_display_iris;

attribute hal_display_iris_client;

attribute hal_display_iris_server;

sepolicy/vendor/bt_mac.te

0 → 100644
+10 −0
Original line number Diff line number Diff line 
type bt_mac, domain;

type bt_mac_exec, exec_type, vendor_file_type, file_type;

init_daemon_domain(bt_mac);



allow bt_mac vendor_toolbox_exec:file rx_file_perms;



allow bt_mac mnt_vendor_file:dir search;

r_dir_file(bt_mac, persist_t2m_param_file)



set_prop(bt_mac, vendor_bluetooth_prop)

sepolicy/vendor/file.te

+2 −1
Original line number Diff line number Diff line 
type fingerprint_data_file, file_type, data_file_type;

type persist_t2m_param_file, file_type, vendor_persist_type;

type tct_mmitest_sysfs, fs_type, sysfs_type;
 
type vendor_sysfs_emkit, fs_type, sysfs_type;