Evolution-X-Devices/device_google_bluejay
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "bluejay: add sepolicy for ufs_firmware_update process" into udc-dev

Browse Source
This commit is contained in:
Leo Liou
2023-04-17 09:58:14 +00:00
committed by Android (Google) Code Review
parent 0304eefdcb ca6ca14a45
commit 23c711561d
4 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
bluejay/genfs_contexts
View File

@@ -4,3 +4,8 @@ genfscon sysfs /devices/platform/10970000.hsi2c/i2c-5/i2c-cs40l26a u:object
genfscon sysfs /devices/platform/10970000.hsi2c/i2c-6/i2c-cs40l26a u:object_r:sysfs_vibrator:s0
genfscon sysfs /devices/platform/10970000.hsi2c/i2c-7/i2c-cs40l26a u:object_r:sysfs_vibrator:s0
genfscon sysfs /devices/platform/10970000.hsi2c/i2c-8/i2c-cs40l26a u:object_r:sysfs_vibrator:s0
# Storage
genfscon sysfs /devices/platform/14700000.ufs/vendor u:object_r:sysfs_scsi_devices_0000:s0
genfscon sysfs /devices/platform/14700000.ufs/model u:object_r:sysfs_scsi_devices_0000:s0
genfscon sysfs /devices/platform/14700000.ufs/rev u:object_r:sysfs_scsi_devices_0000:s0

2
vendor/device.te vendored Normal file
View File

@@ -0,0 +1,2 @@
# Block Devices
type fips_block_device, dev_type;

5
vendor/file_contexts vendored Normal file
View File

@@ -0,0 +1,5 @@
# Binaries
/vendor/bin/ufs_firmware_update\.sh u:object_r:ufs_firmware_update_exec:s0
# Devices
/dev/block/platform/14700000\.ufs/by-name/fips u:object_r:fips_block_device:s0

10
vendor/ufs_firmware_update.te vendored Normal file
View File

@@ -0,0 +1,10 @@
type ufs_firmware_update, domain;
type ufs_firmware_update_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(ufs_firmware_update)
allow ufs_firmware_update vendor_toolbox_exec:file execute_no_trans;
allow ufs_firmware_update block_device:dir r_dir_perms;
allow ufs_firmware_update fips_block_device:blk_file rw_file_perms;
allow ufs_firmware_update sysfs:dir r_dir_perms;
allow ufs_firmware_update sysfs_scsi_devices_0000:file r_file_perms;