From d74db9dff85e1e4ca84f33ecebf0df7c5010d0c0 Mon Sep 17 00:00:00 2001 From: david Date: Mon, 5 Jan 2015 01:48:13 +0100 Subject: Add SELinux policy for hardware tunables Change-Id: Ie58527ef6ca5b9aed48e68d0ec74a6453b3b4643 --- BoardConfigCommon.mk | 4 ---- sepolicy/file.te | 2 ++ sepolicy/file_contexts | 4 ++++ sepolicy/system_app.te | 1 + 4 files changed, 7 insertions(+), 4 deletions(-) create mode 100644 sepolicy/file.te create mode 100644 sepolicy/system_app.te diff --git a/BoardConfigCommon.mk b/BoardConfigCommon.mk index e77f611..754bc91 100644 --- a/BoardConfigCommon.mk +++ b/BoardConfigCommon.mk @@ -61,10 +61,6 @@ TARGET_INIT_VENDOR_LIB := libinit_shinano BOARD_SEPOLICY_DIRS += \ device/sony/shinano-common/sepolicy -# The list below is order dependent -BOARD_SEPOLICY_UNION += \ - file_contexts - # Wifi WPA_SUPPLICANT_VERSION := VER_0_8_X BOARD_WLAN_DEVICE := bcmdhd diff --git a/sepolicy/file.te b/sepolicy/file.te new file mode 100644 index 0000000..a05ee0d --- /dev/null +++ b/sepolicy/file.te @@ -0,0 +1,2 @@ +type sysfs_display, fs_type, sysfs_type; +type sysfs_vibrator, fs_type, sysfs_type; diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts index b9b73f0..01b7557 100644 --- a/sepolicy/file_contexts +++ b/sepolicy/file_contexts @@ -3,3 +3,7 @@ # Audio /dev/tfa98xx u:object_r:audio_device:s0 + +# Hardware tunables +/sys/devices/mdss_dsi_panel/cabc -- u:object_r:sysfs_display:s0 +/sys/devices/virtual/timed_output/vibrator/vtg_level -- u:object_r:sysfs_vibrator:s0 diff --git a/sepolicy/system_app.te b/sepolicy/system_app.te new file mode 100644 index 0000000..20fc2aa --- /dev/null +++ b/sepolicy/system_app.te @@ -0,0 +1 @@ +allow system_app { sysfs_display sysfs_vibrator }:file rw_file_perms; -- cgit v1.2.3