From 2c7ad967d1c9be71a50a9c27e336e180c035e648 Mon Sep 17 00:00:00 2001 From: Davide Garberi Date: Thu, 2 May 2019 16:52:20 +0200 Subject: msm8996-common: sepolicy: Cleanup * Add back the fstab contexts to prevent some vfat denials * Remove a lot of not needed addresses * Create a domain for double tap to wake to not let the powerhal access all the sysfs files Change-Id: I44dfc5e9903eb562748215541f2d71f9a3d111d7 --- sepolicy/file_contexts | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) (limited to 'sepolicy/file_contexts') diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts index ce36adc..429d4c4 100644 --- a/sepolicy/file_contexts +++ b/sepolicy/file_contexts @@ -1,6 +1,6 @@ # Binaries -/vendor/bin/init.wlan.sh u:object_r:qti_init_shell_exec:s0 -/vendor/bin/wcg_mac_tool u:object_r:wcg_mac_exec:s0 +/(vendor|system/vendor)/bin/init.wlan.sh u:object_r:qti_init_shell_exec:s0 +/(vendor|system/vendor)/bin/wcg_mac_tool u:object_r:wcg_mac_exec:s0 # Data files /data/fpc(/.*)? u:object_r:fpc_data_file:s0 @@ -12,13 +12,12 @@ /dev/tfa9890 u:object_r:audio_device:s0 # HALs -/vendor/bin/hw/android\.hardware\.light@2\.0-service\.zuk_8996 u:object_r:hal_light_default_exec:s0 -/vendor/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.0-service\.zuk u:object_r:hal_fingerprint_default_exec:s0 +/(vendor|system/vendor)/bin/hw/android\.hardware\.light@2\.0-service\.zuk_8996 u:object_r:hal_light_default_exec:s0 /(vendor|system/vendor)/bin/hw/vendor\.lineage\.touch@1\.0-service\.zuk_8996 u:object_r:hal_lineage_touch_default_exec:s0 # Misc files on /vendor -/vendor/usr/idc(/.*)? u:object_r:idc_file:s0 -/vendor/usr/keylayout(/.*)? u:object_r:keylayout_file:s0 +/(vendor|system/vendor)/usr/idc(/.*)? u:object_r:idc_file:s0 +/(vendor|system/vendor)/usr/keylayout(/.*)? u:object_r:keylayout_file:s0 # Sys files /sys/devices/soc/soc:fpc1020(/.*)? u:object_r:sysfs_fingerprint:s0 -- cgit v1.2.3