diff options
| author | Tri Vo <trong@google.com> | 2018-10-12 18:10:19 -0700 |
|---|---|---|
| committer | Davide Garberi <dade.garberi@gmail.com> | 2019-11-05 22:19:31 +0100 |
| commit | 650a16fe56ccd9671094d65a78972322827e14f3 (patch) | |
| tree | 6c0e0b475655465107435cca9e80505a5d604cc7 | |
| parent | 1cbe8c65e78065d1e46bc70984d8b84e50fceb6e (diff) | |
msm8996-common: sepolicy: Remove vendor policy for input files.
Bug: 112880217
Test: device boots without denials to input files
Change-Id: I48686c6828bdf99efaabff39c4afb22b0dd8b38b
| -rw-r--r-- | sepolicy/file.te | 4 | ||||
| -rw-r--r-- | sepolicy/file_contexts | 4 | ||||
| -rw-r--r-- | sepolicy/system_server.te | 5 |
3 files changed, 0 insertions, 13 deletions
diff --git a/sepolicy/file.te b/sepolicy/file.te index 486a6d0..318a7b8 100644 --- a/sepolicy/file.te +++ b/sepolicy/file.te @@ -11,7 +11,3 @@ type sysfs_pcie, sysfs_type, fs_type, mlstrustedobject; type sysfs_wifi, sysfs_type, fs_type, mlstrustedobject; type sysfs_scsi_devices_0000, sysfs_type, fs_type; type sysfs_doubletap, sysfs_type, fs_type; - -# /vendor -type idc_file, file_type, vendor_file_type; -type keylayout_file, file_type, vendor_file_type; diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts index 414dad0..1163cb9 100644 --- a/sepolicy/file_contexts +++ b/sepolicy/file_contexts @@ -23,10 +23,6 @@ /(vendor|system/vendor)/bin/hw/android\.hardware\.light@2\.0-service\.zuk_8996 u:object_r:hal_light_default_exec:s0 /(vendor|system/vendor)/bin/hw/vendor\.lineage\.touch@1\.0-service\.zuk_8996 u:object_r:hal_lineage_touch_default_exec:s0 -# Misc files on /vendor -/(vendor|system/vendor)/usr/idc(/.*)? u:object_r:idc_file:s0 -/(vendor|system/vendor)/usr/keylayout(/.*)? u:object_r:keylayout_file:s0 - # Sys files /sys/devices/soc/soc:fpc1020(/.*)? u:object_r:sysfs_fingerprint:s0 /sys/devices/soc/soc:fpc1020/enable_wakeup u:object_r:sysfs_fingerprint:s0 diff --git a/sepolicy/system_server.te b/sepolicy/system_server.te index d2f7240..0c7fbe6 100644 --- a/sepolicy/system_server.te +++ b/sepolicy/system_server.te @@ -1,7 +1,2 @@ get_prop(system_server, vendor_alarm_boot_prop) allow system_server sysfs_vibrator:file read; - -# /vendor/usr/keylayout -r_dir_file(system_server, idc_file) -# /vendor/usr/idc -r_dir_file(system_server, keylayout_file) |