diff options
| author | Davide Garberi <dade.garberi@gmail.com> | 2019-05-02 16:52:20 +0200 |
|---|---|---|
| committer | Davide Garberi <dade.garberi@gmail.com> | 2019-05-02 17:26:32 +0200 |
| commit | 2c7ad967d1c9be71a50a9c27e336e180c035e648 (patch) | |
| tree | 60e0b6d920cfaf3990dd42e254b09f2593b975ae /sepolicy/file_contexts | |
| parent | f03c601509bec9331de6829531d61e927e42f736 (diff) | |
msm8996-common: sepolicy: Cleanup
* Add back the fstab contexts to prevent some vfat denials
* Remove a lot of not needed addresses
* Create a domain for double tap to wake to not let the powerhal access all the sysfs files
Change-Id: I44dfc5e9903eb562748215541f2d71f9a3d111d7
Diffstat (limited to 'sepolicy/file_contexts')
| -rw-r--r-- | sepolicy/file_contexts | 11 |
1 files changed, 5 insertions, 6 deletions
diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts index ce36adc..429d4c4 100644 --- a/sepolicy/file_contexts +++ b/sepolicy/file_contexts @@ -1,6 +1,6 @@ # Binaries -/vendor/bin/init.wlan.sh u:object_r:qti_init_shell_exec:s0 -/vendor/bin/wcg_mac_tool u:object_r:wcg_mac_exec:s0 +/(vendor|system/vendor)/bin/init.wlan.sh u:object_r:qti_init_shell_exec:s0 +/(vendor|system/vendor)/bin/wcg_mac_tool u:object_r:wcg_mac_exec:s0 # Data files /data/fpc(/.*)? u:object_r:fpc_data_file:s0 @@ -12,13 +12,12 @@ /dev/tfa9890 u:object_r:audio_device:s0 # HALs -/vendor/bin/hw/android\.hardware\.light@2\.0-service\.zuk_8996 u:object_r:hal_light_default_exec:s0 -/vendor/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.0-service\.zuk u:object_r:hal_fingerprint_default_exec:s0 +/(vendor|system/vendor)/bin/hw/android\.hardware\.light@2\.0-service\.zuk_8996 u:object_r:hal_light_default_exec:s0 /(vendor|system/vendor)/bin/hw/vendor\.lineage\.touch@1\.0-service\.zuk_8996 u:object_r:hal_lineage_touch_default_exec:s0 # Misc files on /vendor -/vendor/usr/idc(/.*)? u:object_r:idc_file:s0 -/vendor/usr/keylayout(/.*)? u:object_r:keylayout_file:s0 +/(vendor|system/vendor)/usr/idc(/.*)? u:object_r:idc_file:s0 +/(vendor|system/vendor)/usr/keylayout(/.*)? u:object_r:keylayout_file:s0 # Sys files /sys/devices/soc/soc:fpc1020(/.*)? u:object_r:sysfs_fingerprint:s0 |