aboutsummaryrefslogtreecommitdiff
path: root/sepolicy
diff options
context:
space:
mode:
authorDavide Garberi <dade.garberi@gmail.com>2021-10-07 10:17:47 +0200
committerDavide Garberi <dade.garberi@gmail.com>2021-10-19 15:09:38 +0200
commit663d1fb15b06572e677f9aa7bb59136d903f6e76 (patch)
tree5d25ab409d380843536179af5e0571d5e0892ba3 /sepolicy
parent43be610d8f65ce9edad4213fc88dbf4f61deb23d (diff)
msm8996-common: Move oem unlock prop set to libinit
* Since eleven the property wouldn't get its new context anymore, so work around that Change-Id: If2f987dd28e1423f53460c65aaa6c03568d94eba
Diffstat (limited to 'sepolicy')
-rw-r--r--sepolicy/vendor/property.te1
-rw-r--r--sepolicy/vendor/property_contexts3
-rw-r--r--sepolicy/vendor/qti_init_shell.te5
-rw-r--r--sepolicy/vendor/system_app.te1
4 files changed, 0 insertions, 10 deletions
diff --git a/sepolicy/vendor/property.te b/sepolicy/vendor/property.te
deleted file mode 100644
index 9520846..0000000
--- a/sepolicy/vendor/property.te
+++ /dev/null
@@ -1 +0,0 @@
-type oem_unlock_prop, property_type;
diff --git a/sepolicy/vendor/property_contexts b/sepolicy/vendor/property_contexts
index 1ae2e9b..c8eab1e 100644
--- a/sepolicy/vendor/property_contexts
+++ b/sepolicy/vendor/property_contexts
@@ -4,8 +4,5 @@ persist.camera. u:object_r:camera_prop:s0
# Netmgrd
persist.net.doxlat u:object_r:vendor_xlat_prop:s0
-# OEM unlocking
-ro.oem_unlock_supported u:object_r:oem_unlock_prop:s0
-
# Qseecomd
sys.listeners.registered u:object_r:vendor_tee_listener_prop:s0
diff --git a/sepolicy/vendor/qti_init_shell.te b/sepolicy/vendor/qti_init_shell.te
index 56c35ba..f154182 100644
--- a/sepolicy/vendor/qti_init_shell.te
+++ b/sepolicy/vendor/qti_init_shell.te
@@ -8,8 +8,3 @@ allow qti_init_shell mnt_vendor_file:file create_file_perms;
# Allow qti_init_shell to write and read /mnt/vendor/persist/bluetooth/bt_mac
allow qti_init_shell persist_bluetooth_file:dir { add_name create search write };
allow qti_init_shell persist_bluetooth_file:file { create getattr open read write };
-
-# Allow qti_init_shell to read cmdline
-allow qti_init_shell proc_cmdline:file { getattr open read };
-
-set_prop(qti_init_shell, oem_unlock_prop)
diff --git a/sepolicy/vendor/system_app.te b/sepolicy/vendor/system_app.te
index d0e4915..54a86c9 100644
--- a/sepolicy/vendor/system_app.te
+++ b/sepolicy/vendor/system_app.te
@@ -4,4 +4,3 @@ allow system_app shell_prop:property_service set;
allow system_app hal_imsrcsd_hwservice:hwservice_manager find;
binder_call(system_app, wificond);
-get_prop(system_app, oem_unlock_prop);