diff options
25 files changed, 1 insertions, 68 deletions
diff --git a/sepolicy/vendor/atfwd.te b/sepolicy/vendor/atfwd.te deleted file mode 100644 index a60277a..0000000 --- a/sepolicy/vendor/atfwd.te +++ /dev/null @@ -1 +0,0 @@ -allow atfwd sysfs:file read; diff --git a/sepolicy/vendor/file_contexts b/sepolicy/vendor/file_contexts index d9e7b6d..bc1cbb6 100644 --- a/sepolicy/vendor/file_contexts +++ b/sepolicy/vendor/file_contexts @@ -5,7 +5,7 @@ /sys/devices/soc/soc:fpc1020(/.*)? u:object_r:fingerprint_sysfs:s0 # For Goodix fingerprint -/dev/goodix_fp* u:object_r:fingerprint_device:s0 +/dev/goodix_fp u:object_r:fingerprint_device:s0 # Goodix Fingerprint data /data/gf_data(/.*)? u:object_r:fingerprintd_data_file:s0 @@ -46,8 +46,5 @@ # RTC /sys/devices/soc/800f000.qcom,spmi/spmi-0/spmi0-00/800f000.qcom,spmi:qcom,pm660@0:qcom,pm660_rtc/rtc/rtc0(/.*)? u:object_r:sysfs_rtc:s0 -# Shell Script -/(vendor|system/vendor)/bin/init\.goodix\.sh u:object_r:init_fingerprint_exec:s0 - # Thermal /data/vendor/thermal(/.*)? u:object_r:thermal_data_file:s0 diff --git a/sepolicy/vendor/hal_audio_default.te b/sepolicy/vendor/hal_audio_default.te deleted file mode 100644 index 128920f..0000000 --- a/sepolicy/vendor/hal_audio_default.te +++ /dev/null @@ -1,2 +0,0 @@ -allow hal_audio_default vendor_data_file:dir { create write add_name }; -allow hal_audio_default vendor_data_file:file { append create getattr open read }; diff --git a/sepolicy/vendor/hal_cas_default.te b/sepolicy/vendor/hal_cas_default.te deleted file mode 100644 index 18b00de..0000000 --- a/sepolicy/vendor/hal_cas_default.te +++ /dev/null @@ -1 +0,0 @@ -vndbinder_use(hal_cas_default) diff --git a/sepolicy/vendor/hal_gnss_qti.te b/sepolicy/vendor/hal_gnss_qti.te deleted file mode 100644 index 711c8bb..0000000 --- a/sepolicy/vendor/hal_gnss_qti.te +++ /dev/null @@ -1 +0,0 @@ -allow hal_gnss_qti sysfs:file { read open }; diff --git a/sepolicy/vendor/hal_graphics_composer_default.te b/sepolicy/vendor/hal_graphics_composer_default.te deleted file mode 100644 index 39e8fb4..0000000 --- a/sepolicy/vendor/hal_graphics_composer_default.te +++ /dev/null @@ -1,2 +0,0 @@ -allow hal_graphics_composer_default sysfs_graphics:file r_file_perms; -allow hal_graphics_composer_default sysfs_graphics:lnk_file read; diff --git a/sepolicy/vendor/hal_perf_default.te b/sepolicy/vendor/hal_perf_default.te deleted file mode 100644 index 115df51..0000000 --- a/sepolicy/vendor/hal_perf_default.te +++ /dev/null @@ -1 +0,0 @@ -dontaudit hal_perf_default self:capability { dac_override dac_read_search }; diff --git a/sepolicy/vendor/hal_sensors_default.te b/sepolicy/vendor/hal_sensors_default.te deleted file mode 100644 index 28414f9..0000000 --- a/sepolicy/vendor/hal_sensors_default.te +++ /dev/null @@ -1 +0,0 @@ -allow hal_sensors_default sysfs:file { read open }; diff --git a/sepolicy/vendor/hvdcp.te b/sepolicy/vendor/hvdcp.te deleted file mode 100644 index 49a6b78..0000000 --- a/sepolicy/vendor/hvdcp.te +++ /dev/null @@ -1 +0,0 @@ -allow hvdcp sysfs:file { open read }; diff --git a/sepolicy/vendor/hwservice.te b/sepolicy/vendor/hwservice.te index ce36043..6c299d1 100644 --- a/sepolicy/vendor/hwservice.te +++ b/sepolicy/vendor/hwservice.te @@ -1,3 +1,2 @@ type goodixhw_service, hwservice_manager_type; type hal_mlipay_hwservice, hwservice_manager_type; -type fpnav_hwservice, hwservice_manager_type; diff --git a/sepolicy/vendor/hwservicemanager.te b/sepolicy/vendor/hwservicemanager.te deleted file mode 100644 index 3262afb..0000000 --- a/sepolicy/vendor/hwservicemanager.te +++ /dev/null @@ -1,4 +0,0 @@ -#============= hwservicemanager ============== -allow hwservicemanager init:dir search; -allow hwservicemanager init:file { open read }; -allow hwservicemanager init:process getattr; diff --git a/sepolicy/vendor/init.te b/sepolicy/vendor/init.te deleted file mode 100644 index 16ca39b..0000000 --- a/sepolicy/vendor/init.te +++ /dev/null @@ -1,5 +0,0 @@ -allow init hwservicemanager:binder { call transfer }; -allow init ipa_dev:chr_file open; -allow init ion_device:chr_file ioctl; -allow init property_socket:sock_file write; -allow init sysfs_dm:file { open write }; diff --git a/sepolicy/vendor/init_fingerprint.te b/sepolicy/vendor/init_fingerprint.te deleted file mode 100644 index 29ea735..0000000 --- a/sepolicy/vendor/init_fingerprint.te +++ /dev/null @@ -1,15 +0,0 @@ -type init_fingerprint, domain; -type init_fingerprint_exec, exec_type, vendor_file_type, file_type; - -# Allow for transition from init domain to init_fingerprint -init_daemon_domain(init_fingerprint) - -# Shell script needs to execute /vendor/bin/sh -allow init_fingerprint vendor_shell_exec:file rx_file_perms; -allow init_fingerprint vendor_toolbox_exec:file rx_file_perms; - -# Allow to delete file -allow init_fingerprint persist_file:dir search; -allow init_fingerprint persist_drm_file:dir { read search open write remove_name }; -allow init_fingerprint persist_drm_file:file { getattr unlink }; -allow init_fingerprint system_data_file:file getattr; diff --git a/sepolicy/vendor/location.te b/sepolicy/vendor/location.te deleted file mode 100644 index 4333581..0000000 --- a/sepolicy/vendor/location.te +++ /dev/null @@ -1 +0,0 @@ -allow location sysfs:file { read open }; diff --git a/sepolicy/vendor/netmgrd.te b/sepolicy/vendor/netmgrd.te deleted file mode 100644 index 47ce266..0000000 --- a/sepolicy/vendor/netmgrd.te +++ /dev/null @@ -1 +0,0 @@ -allow netmgrd property_socket:sock_file write; diff --git a/sepolicy/vendor/priv_app.te b/sepolicy/vendor/priv_app.te deleted file mode 100644 index 7ae851d..0000000 --- a/sepolicy/vendor/priv_app.te +++ /dev/null @@ -1 +0,0 @@ -allow priv_app sysfs_graphics:file { getattr open read };
\ No newline at end of file diff --git a/sepolicy/vendor/property_contexts b/sepolicy/vendor/property_contexts index b1a0c21..c5212b1 100644 --- a/sepolicy/vendor/property_contexts +++ b/sepolicy/vendor/property_contexts @@ -1,5 +1,4 @@ persist.camera. u:object_r:camera_prop:s0 -persist.vendor.camera. u:object_r:camera_prop:s0 ro.boot.fpsensor u:object_r:hal_fingerprint_prop:s0 sys.fp.goodix u:object_r:hal_fingerprint_prop:s0 sys.fp.vendor u:object_r:hal_fingerprint_prop:s0 diff --git a/sepolicy/vendor/qti_init_shell.te b/sepolicy/vendor/qti_init_shell.te deleted file mode 100644 index f5584a6..0000000 --- a/sepolicy/vendor/qti_init_shell.te +++ /dev/null @@ -1,4 +0,0 @@ -allow qti_init_shell sysfs_cpu_boost:file write; -allow qti_init_shell { sysfs sysfs_dm }:file write; -allow qti_init_shell vendor_radio_data_file:dir { getattr read search }; -allow qti_init_shell vendor_radio_data_file:file { getattr read setattr write }; diff --git a/sepolicy/vendor/rild.te b/sepolicy/vendor/rild.te deleted file mode 100644 index 06625de..0000000 --- a/sepolicy/vendor/rild.te +++ /dev/null @@ -1 +0,0 @@ -allow rild vendor_file:file ioctl; diff --git a/sepolicy/vendor/system_app.te b/sepolicy/vendor/system_app.te deleted file mode 100644 index c4a7f00..0000000 --- a/sepolicy/vendor/system_app.te +++ /dev/null @@ -1,2 +0,0 @@ -allow system_app vendor_default_prop:file { getattr open read }; -allow system_app wificond:binder call; diff --git a/sepolicy/vendor/system_server.te b/sepolicy/vendor/system_server.te index 1ab55bd..b364128 100644 --- a/sepolicy/vendor/system_server.te +++ b/sepolicy/vendor/system_server.te @@ -1,5 +1,2 @@ allow system_server vendor_keylayout_file:dir search; allow system_server vendor_keylayout_file:file r_file_perms; -allow system_server sysfs_vibrator:file rw_file_perms; -allow system_server sysfs_rtc:file r_file_perms; -allow system_server fpnav_hwservice:hwservice_manager { add find }; diff --git a/sepolicy/vendor/tee.te b/sepolicy/vendor/tee.te index 6c2c9b1..0a124bc 100644 --- a/sepolicy/vendor/tee.te +++ b/sepolicy/vendor/tee.te @@ -4,5 +4,3 @@ typeattribute tee data_between_core_and_vendor_violators; allow tee system_data_file:dir r_dir_perms; allow tee fingerprintd_data_file:dir rw_dir_perms; allow tee fingerprintd_data_file:file create_file_perms; -allow tee vendor_data_file:file { read open unlink }; -allow tee vendor_data_file:dir { write remove_name read }; diff --git a/sepolicy/vendor/thermal-engine.te b/sepolicy/vendor/thermal-engine.te index 00922f8..0e03308 100644 --- a/sepolicy/vendor/thermal-engine.te +++ b/sepolicy/vendor/thermal-engine.te @@ -4,7 +4,3 @@ allow thermal-engine self:capability { chown fowner }; dontaudit thermal-engine self:capability dac_override; set_prop(thermal-engine, thermal_engine_prop); - -r_dir_file(thermal-engine sysfs_devfreq) -r_dir_file(thermal-engine sysfs_graphics) -r_dir_file(thermal-engine sysfs_thermal) diff --git a/sepolicy/vendor/vendor_init.te b/sepolicy/vendor/vendor_init.te index d53b2c7..8d3b1e6 100644 --- a/sepolicy/vendor/vendor_init.te +++ b/sepolicy/vendor/vendor_init.te @@ -6,9 +6,3 @@ allow vendor_init { }:dir { create search getattr open read setattr ioctl write add_name remove_name rmdir relabelfrom }; set_prop(vendor_init, camera_prop) -set_prop(vendor_init, persist_debug_prop) -set_prop(vendor_init, persist_dpm_prop) -set_prop(vendor_init, qcom_ims_prop) - -allow vendor_init rootfs:dir { add_name create setattr write }; -allow vendor_init rootfs:lnk_file setattr; diff --git a/sepolicy/vendor/vndservicemanager.te b/sepolicy/vendor/vndservicemanager.te deleted file mode 100644 index 8d04dea..0000000 --- a/sepolicy/vendor/vndservicemanager.te +++ /dev/null @@ -1,3 +0,0 @@ -allow vndservicemanager hal_fingerprint_default:dir { search read open }; -allow vndservicemanager hal_fingerprint_default:file { read open }; -allow vndservicemanager hal_fingerprint_default:process getattr; |