Skip to content
GitLab
Menu
Projects
Groups
Snippets
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in / Register
Toggle navigation
Menu
Open sidebar
e
devices
android_device_samsung_exynos7870-common
Commits
369af2e6
Verified
Commit
369af2e6
authored
Mar 15, 2021
by
steadfasterX
😁
Browse files
universal7870:selinux: split by private/pub/vendor
parents
d7b4cdb9
3449b1f3
Changes
63
Hide whitespace changes
Inline
Side-by-side
BoardConfigCommon.mk
View file @
369af2e6
...
...
@@ -167,9 +167,13 @@ VENDOR_SECURITY_PATCH := 2019-10-05
# Seccomp
BOARD_SECCOMP_POLICY
:=
$(LOCAL_PATH)
/seccomp
#SELINUX_IGNORE_NEVERALLOWS := true
# SELinux
BOARD_SEPOLICY_DIRS
:=
$(LOCAL_PATH)
/sepolicy
BOARD_SEPOLICY_VERS
:=
$(PLATFORM_SDK_VERSION)
.0
BOARD_PLAT_PRIVATE_SEPOLICY_DIR
:=
$(LOCAL_PATH)
/sepolicy/private
BOARD_PLAT_PUBLIC_SEPOLICY_DIR
:=
$(LOCAL_PATH)
/sepolicy/public
BOARD_SEPOLICY_DIRS
:=
$(LOCAL_PATH)
/sepolicy/vendor
# Shim
TARGET_LD_SHIM_LIBS
+=
\
...
...
sepolicy/audioserver.te
→
sepolicy/
vendor/
audioserver.te
View file @
369af2e6
File moved
sepolicy/bluetooth.te
→
sepolicy/
vendor/
bluetooth.te
View file @
369af2e6
File moved
sepolicy/boot_debug.te
→
sepolicy/
vendor/
boot_debug.te
View file @
369af2e6
File moved
sepolicy/cameraserver.te
→
sepolicy/
vendor/
cameraserver.te
View file @
369af2e6
File moved
sepolicy/charger.te
→
sepolicy/
vendor/
charger.te
View file @
369af2e6
File moved
sepolicy/cpboot-daemon.te
→
sepolicy/
vendor/
cpboot-daemon.te
View file @
369af2e6
File moved
sepolicy/vendor/crash_dump.te
0 → 100644
View file @
369af2e6
allow crash_dump hwservicemanager_prop:file open;
sepolicy/device.te
→
sepolicy/
vendor/
device.te
View file @
369af2e6
File moved
sepolicy/file.te
→
sepolicy/
vendor/
file.te
View file @
369af2e6
...
...
@@ -48,6 +48,7 @@ type sysfs_block, sysfs_type, fs_type, mlstrustedobject;
type sysfs_jack, sysfs_type, fs_type, mlstrustedobject;
type sysfs_v4l, sysfs_type, fs_type, mlstrustedobject;
type sysfs_sswap, sysfs_type, fs_type, mlstrustedobject;
type sysfs_kgsl, sysfs_type, fs_type;
### data types
type biometrics_vendor_data_file, file_type, data_file_type;
...
...
sepolicy/file_contexts
→
sepolicy/
vendor/
file_contexts
View file @
369af2e6
File moved
sepolicy/fingerprintd.te
→
sepolicy/
vendor/
fingerprintd.te
View file @
369af2e6
File moved
sepolicy/fsck.te
→
sepolicy/
vendor/
fsck.te
View file @
369af2e6
File moved
sepolicy/genfs_contexts
→
sepolicy/
vendor/
genfs_contexts
View file @
369af2e6
File moved
sepolicy/gpsd.te
→
sepolicy/
vendor/
gpsd.te
View file @
369af2e6
File moved
sepolicy/hal_audio_default.te
→
sepolicy/
vendor/
hal_audio_default.te
View file @
369af2e6
File moved
sepolicy/hal_bluetooth_default.te
→
sepolicy/
vendor/
hal_bluetooth_default.te
View file @
369af2e6
File moved
sepolicy/hal_camera_default.te
→
sepolicy/
vendor/
hal_camera_default.te
View file @
369af2e6
...
...
@@ -6,3 +6,7 @@ allow hal_camera_default hal_graphics_mapper_hwservice:hwservice_manager find;
vndbinder_use(hal_camera_default)
allow hal_camera_default sysfs:file { getattr open read write };
#allow hal_camera_default ashmem_device_service:service_manager find;
allow hal_camera_default ashmemd:binder call;
allow hal_camera_default servicemanager:binder call;
sepolicy/hal_drm_clearkey.te
→
sepolicy/
vendor/
hal_drm_clearkey.te
View file @
369af2e6
File moved
sepolicy/hal_drm_default.te
→
sepolicy/
vendor/
hal_drm_default.te
View file @
369af2e6
File moved
Prev
1
2
3
4
Next
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment