universal7870: selinux: fix macloader, cleanup

Signed-off-by: steadfasterX <steadfasterX@gmail.com>

sepolicy/file_contexts

@@ -203,13 +203,14 @@
 # deamons
 #
 
-/(vendor|system/vendor)/bin/mcDriverDaemon   u:object_r:tee_exec:s0
-/(vendor|system/vendor)/bin/modemloader      u:object_r:modemloader_exec:s0
-/(vendor|system/vendor)/bin/wifiloader       u:object_r:wifiloader_exec:s0
-
-/(vendor|system/vendor)/bin/cbd              u:object_r:cpboot-daemon_exec:s0
-/(vendor|system/vendor)/bin/gpsd             u:object_r:gpsd_exec:s0
-/(vendor|system/vendor)/bin/sswap            u:object_r:sswap_exec:s0
+/(vendor|system/vendor)/bin/mcDriverDaemon   		u:object_r:tee_exec:s0
+/(vendor|system/vendor)/bin/modemloader     		u:object_r:modemloader_exec:s0
+/(vendor|system/vendor)/bin/wifiloader       		u:object_r:wifiloader_exec:s0
+/(vendor|system/vendor)/bin/hw/macloader		u:object_r:macloader_exec:s0
+
+/(vendor|system/vendor)/bin/cbd              		u:object_r:cpboot-daemon_exec:s0
+/(vendor|system/vendor)/bin/hw/gpsd             	u:object_r:gpsd_exec:s0
+/(vendor|system/vendor)/bin/sswap            		u:object_r:sswap_exec:s0
 
 /(vendor|system/vendor)/bin/hw/vendor\.lineage\.livedisplay@2\.0-service\.samsung-exynos    u:object_r:hal_lineage_livedisplay_sysfs_exec:s0
 /(vendor|system/vendor)/bin/hw/vendor\.lineage\.touch@1\.0-service\.samsung                 u:object_r:hal_lineage_touch_default_exec:s0

sepolicy/macloader.te

+type macloader, domain;
+type macloader_exec, exec_type, vendor_file_type, file_type;
+
+# macloader is started by init, type transit from init domain to macloader domain
+init_daemon_domain(macloader)
+
+allow macloader efs_file:dir search;
+
+allow macloader wifi_efs_file:dir search;
+allow macloader wifi_efs_file:file { open read };
+
+allow macloader mediaserver_exec:file read;