Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Verified Commit d36feb36 authored by steadfasterX's avatar steadfasterX 😁
Browse files

universal7870: selinux: fix gps/gnss 



Signed-off-by: default avatarsteadfasterX <steadfasterX@gmail.com>
parent 17998757

sepolicy/file_contexts

+3 −0
Original line number Diff line number Diff line
@@ -56,6 +56,9 @@ 
# Knox status

/dev/knox_kap                u:object_r:knox_device:s0



# gnss

/dev/gnss_ipc			u:object_r:gps_device:s0



# audio hal

/dev/i2c-20			u:object_r:audio_device:s0

sepolicy/gpsd.te

+7 −0
Original line number Diff line number Diff line 
type gpsd, domain, netdomain;

type gpsd_exec, exec_type, vendor_file_type, file_type;



# accessing gnss device

type gnss_device, dev_type;



# gpsd is started by init, type transit from init domain to gpsd domain

init_daemon_domain(gpsd)
@@ -34,3 +37,7 @@ allow gpsd fwmarkd_socket:sock_file write; 
allow gpsd gps_vendor_data_file:dir rw_dir_perms;

allow gpsd gps_vendor_data_file:file create_file_perms;

allow gpsd gps_vendor_data_file:fifo_file create_file_perms;



allow gpsd sysfs_gps:file { open read getattr };

allow gpsd sysfs_wake_lock:file { open write };

allow gpsd gps_device:chr_file { read write open ioctl };

sepolicy/hal_gnss_default.te

+1 −0
Original line number Diff line number Diff line
@@ -14,3 +14,4 @@ allow hal_gnss_default mnt_vendor_file:dir search; 
#allow hal_gnss_default default_android_hwservice:hwservice_manager { add find };

allow hal_gnss_default fwk_sensor_hwservice:hwservice_manager find;

allow hal_gnss_default init:unix_stream_socket connectto;

allow hal_gnss_default gpsd:unix_stream_socket connectto;