Evolution-X-Devices/device_google_bramble
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

initialize selinux contexts

Browse Source 
am: a32122f0e8

Change-Id: Idaf2f09dbd08d2df28e6bec6c5b68f090aa983c9
This commit is contained in:
Adam Shih
2019-08-14 13:08:02 -07:00
committed by android-build-merger
parent 1998e3777b a32122f0e8
commit 66e12886ba
192 changed files with 2031 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
bramble-sepolicy.mk
View File

@@ -1,4 +1,4 @@
ARD_PLAT_PUBLIC_SEPOLICY_DIR := device/google/bramble-sepolicy/public
BOARD_PLAT_PUBLIC_SEPOLICY_DIR := device/google/bramble-sepolicy/public
BOARD_PLAT_PRIVATE_SEPOLICY_DIR := device/google/bramble-sepolicy/private
# vendors

1
public/dataservice_app.te Normal file
View File

@@ -0,0 +1 @@
type dataservice_app, domain;

1
public/device.te Normal file
View File

@@ -0,0 +1 @@
type smcinvoke_device, dev_type;

1
public/dun-server.te Normal file
View File

@@ -0,0 +1 @@
type dun-server, domain;

1
public/file.te Normal file
View File

@@ -0,0 +1 @@
type dpmtcm_socket, file_type, coredomain_socket, mlstrustedobject;

1
public/google_camera_app.te Normal file
View File

@@ -0,0 +1 @@
type google_camera_app, domain, coredomain;

1
public/hwservice.te Normal file
View File

@@ -0,0 +1 @@
type hal_atfwd_hwservice, coredomain_hwservice, hwservice_manager_type;

1
public/mmi_sys.te Executable file
View File

@@ -0,0 +1 @@
type vendor_mmi_sys, domain;

2
public/property.te Normal file
View File

@@ -0,0 +1,2 @@
type persist_dpm_prop, property_type;
type vendor_bt_prop, property_type;

1
public/qtelephony.te Normal file
View File

@@ -0,0 +1 @@
type qtelephony, domain;

9
public/te_macros Normal file
View File

@@ -0,0 +1,9 @@
###########################################
# dump_hal(hal_type)
# Ability to dump the hal debug info
#
define(`dump_hal', `
hal_client_domain(dumpstate, $1);
allow $1_server dumpstate:fifo_file write;
allow $1_server dumpstate:fd use;
')

2
public/wfdservice.te Normal file
View File

@@ -0,0 +1,2 @@
type wfdservice, domain;
type wfdservice_exec, system_file_type, exec_type, file_type;

3
vendor/google/airbrush.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type airbrush, domain;
type airbrush_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(airbrush)

49
vendor/google/bug_map vendored Normal file
View File

@@ -0,0 +1,49 @@
adsprpcd adsprpcd capability 132321887
fsverity_init fsverity_init capability 132323675
hal_audio_default sysfs_thermal dir 129111829
hal_face_default config_prop file 134894179
hal_face_default hal_face_default capability 134123420
hal_face_default vendor_display_prop file 134894179
hal_health_default persist_default_file lnk_file 132324546
hal_health_default sysfs file 132324546
hal_imsrtp default_prop file 134122990
hal_rcsservice default_prop file 129383643
hal_sensors_default sysfs_esoc dir 129437033
hal_sensors_default sysfs_ssr file 129437033
hal_tetheroffload_default unlabeled dir 135646017
ims sysfs_faceauth dir 129460752
init-insmod-sh init-insmod-sh capability 132594872
init kernel system 132409186
init socket_device sock_file 132412558
kernel kernel capability 132594872
netd netd capability 129670638
priv_app camera_ro_prop file 134899434
qtidataservices_app sysfs_esoc dir 131581902
qtidataservices_app sysfs_msm_subsys dir 131581902
sensors diag_device chr_file 129437033
sensors sensors qipcrtr_socket 129437033
sensors sysfs_esoc dir 129437033
sensors sysfs_ssr file 129437033
system_app vendor_display_prop file 131773821
thermal-engine socket_device dir 124250714
thermal-engine sysfs_batteryinfo dir 124250714
thermal-engine sysfs dir 124250714
thermal-engine sysfs_esoc dir 124250714
thermal-engine sysfs_leds dir 124250714
thermal-engine sysfs_soc dir 124250714
thermal-engine sysfs_ssr file 124250714
time_daemon sysfs_esoc dir 128869480
time_daemon sysfs_faceauth dir 128869480
time_daemon sysfs_faceauth file 128869480
time_daemon sysfs_msm_subsys dir 128869480
time_daemon sysfs_soc dir 128869480
time_daemon sysfs_soc file 128869480
time_daemon sysfs_ssr file 128869480
time_daemon unlabeled dir 135646017
ueventd ueventd capability 132595817
untrusted_app_27 camera_ro_prop file 134899434
vendor_misc_writer sysfs_dt_firmware_android dir 134122603
vendor_pd_mapper kmsg_device chr_file 129744410
vendor_pd_mapper sysfs_esoc dir 129744410
vendor_pd_mapper sysfs_msm_subsys dir 129744410
zygote zygote capability 132595817

1
vendor/google/cbrs_setup.te vendored Normal file
View File

@@ -0,0 +1 @@
type cbrs_setup_app, domain;

27
vendor/google/certs/app.x509.pem vendored Normal file
View File

@@ -0,0 +1,27 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

15
vendor/google/certs/pulse-release.x509.pem vendored Normal file
View File

@@ -0,0 +1,15 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

3
vendor/google/citadel_provision.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type citadel_provision, domain;
type citadel_provision_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(citadel_provision)

3
vendor/google/citadeld.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type citadeld, domain;
type citadeld_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(citadeld)

3
vendor/google/color_init.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type color_init, domain;
type color_init_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(color_init)

12
vendor/google/device.te vendored Normal file
View File

@@ -0,0 +1,12 @@
type abc_tpu_device, dev_type;
type airbrush_device, dev_type, mlstrustedobject;
type airbrush_sm_device, dev_type, mlstrustedobject;
type citadel_device, dev_type;
type faceauth_device, dev_type;
type ipu_device, dev_type, mlstrustedobject;
type ramoops_device, dev_type;
type maxfg_device, dev_type;
type rls_device, dev_type;
type laser_device, dev_type;
type pwrstats_device, dev_type;
type dp_block_device, dev_type;

1
vendor/google/face_debug.te vendored Normal file
View File

@@ -0,0 +1 @@
type face_debug, domain;

41
vendor/google/file.te vendored
View File

@@ -1,2 +1,39 @@
type persist_default_file, file_type, vendor_persist_type;
type persist_battery_file, file_type, vendor_persist_type;
type persist_haptics_file, file_type, vendor_persist_type;
type airbrush_data_file, file_type, data_file_type;
type modem_stat_data_file, file_type, data_file_type;
type modem_dump_file, file_type, data_file_type;
type tcpdump_vendor_data_file, file_type, data_file_type;
type ramoops_vendor_data_file, file_type, data_file_type, mlstrustedobject;
type proc_touch, proc_type, fs_type, mlstrustedobject;
type debugfs_batteryinfo, debugfs_type, fs_type;
type sysfs_display, sysfs_type, fs_type;
type sysfs_touch, sysfs_type, fs_type;
type sysfs_power_stats, sysfs_type, fs_type;
type sysfs_power_stats_ignore, sysfs_type, fs_type;
type sysfs_camera, sysfs_type, fs_type;
type sysfs_devcfg, sysfs_type, fs_type;
type sysfs_msm_boardid, fs_type, sysfs_type;
type sysfs_iio_devices, fs_type, sysfs_type;
type sysfs_pixelstats, fs_type, sysfs_type;
type sysfs_airbrush, sysfs_type, fs_type;
type sysfs_wlc, sysfs_type, fs_type;
type sysfs_pstore, sysfs_type, fs_type;
type debugfs_f2fs, debugfs_type, fs_type;
type proc_f2fs, proc_type, fs_type;
type debugfs_ufs, debugfs_type, fs_type;
type sysfs_lights, sysfs_type, fs_type;
type sysfs_esim, sysfs_type, fs_type;
type debugfs_usb, debugfs_type, fs_type;
type mediadrm_vendor_data_file, file_type, data_file_type;
type diag_socket, file_type, mlstrustedobject;
type ese_vendor_data_file, file_type, data_file_type;
type debugfs_dma_buf, debugfs_type, fs_type;
type debugfs_clk, debugfs_type, fs_type;
type debugfs_airbrush, debugfs_type, fs_type;
type sysfs_airbrush_dumpstate, sysfs_type, fs_type;
type debugfs_pmic, debugfs_type, fs_type;
type sysfs_contaminant, sysfs_type, fs_type;
type hal_neuralnetworks_darwinn_hal_camera_data_file, file_type, data_file_type;
type camera_calibration_vendor_data_file, file_type, data_file_type;
type sysfs_knowles_info, fs_type, sysfs_type;

85
vendor/google/file_contexts vendored Normal file
View File

@@ -0,0 +1,85 @@
# dev nodes
/dev/ab_sm u:object_r:airbrush_sm_device:s0
/dev/ab-dram u:object_r:airbrush_device:s0
/dev/abc-pcie-dma u:object_r:airbrush_device:s0
/dev/abc-pcie-tpu_0 u:object_r:abc_tpu_device:s0
/dev/access-metadata u:object_r:ramoops_device:s0
/dev/access-ramoops u:object_r:ramoops_device:s0
/dev/block/zram0 u:object_r:swap_block_device:s0
/dev/citadel0 u:object_r:citadel_device:s0
/dev/faceauth u:object_r:faceauth_device:s0
/dev/ipu u:object_r:ipu_device:s0
/dev/maxfg_history u:object_r:maxfg_device:s0
/dev/vd6281 u:object_r:rls_device:s0
/dev/sensor_tunnel u:object_r:rls_device:s0
/dev/st54j_se u:object_r:secure_element_device:s0
/dev/subsys_faceauth u:object_r:faceauth_device:s0
/dev/lm36011_flood u:object_r:laser_device:s0
/dev/lm36011_dot u:object_r:laser_device:s0
/dev/iaxxx-module-celldrv u:object_r:pwrstats_device:s0
# system binaries
/system/bin/hw/hardware\.google\.pixelstats@1\.0-service u:object_r:pixelstats_system_exec:s0
/vendor/bin/pixelstats-vendor u:object_r:pixelstats_vendor_exec:s0
# vendor binaries
/vendor/bin/hw/android\.hardware\.atrace@1\.0-service.pixel u:object_r:hal_atrace_default_exec:s0
/vendor/bin/hw/android\.hardware\.authsecret@1\.0-service\.citadel u:object_r:hal_authsecret_citadel_exec:s0
/vendor/bin/hw/android\.hardware\.biometrics\.face@1\.0-service\.google u:object_r:hal_face_default_exec:s0
/vendor/bin/hw/android\.hardware\.camera\.provider@2\.4-service-google u:object_r:hal_camera_default_exec:s0
/vendor/bin/hw/android\.hardware\.health@2\.0-service\.bramble u:object_r:hal_health_default_exec:s0
/vendor/bin/hw/android\.hardware\.keymaster@4\.0-service\.citadel u:object_r:hal_keymaster_citadel_exec:s0
/vendor/bin/hw/android\.hardware\.neuralnetworks@1\.2-service-noronha u:object_r:hal_neuralnetworks_darwinn_exec:s0
/vendor/bin/hw/android\.hardware\.oemlock@1\.0-service\.citadel u:object_r:hal_oemlock_citadel_exec:s0
/vendor/bin/hw/android\.hardware\.power\.stats@1\.0-service\.pixel u:object_r:hal_power_stats_default_exec:s0
/vendor/bin/hw/android\.hardware\.power@1\.3-service\.pixel-libperfmgr u:object_r:hal_power_default_exec:s0
/vendor/bin/hw/android\.hardware\.secure_element@1\.0-service\.st u:object_r:hal_secure_element_default_exec:s0
/vendor/bin/hw/android\.hardware\.thermal@2\.0-service\.pixel u:object_r:hal_thermal_default_exec:s0
/vendor/bin/hw/android\.hardware\.usb@1\.2-service\.bramble u:object_r:hal_usb_impl_exec:s0
/vendor/bin/hw/android\.hardware\.vibrator@1\.3-service\.bramble u:object_r:hal_vibrator_default_exec:s0
/vendor/bin/hw/android\.hardware\.weaver@1\.0-service\.citadel u:object_r:hal_weaver_citadel_exec:s0
/vendor/bin/hw/citadeld u:object_r:citadeld_exec:s0
/vendor/bin/hw/init_citadel u:object_r:init_citadel_exec:s0
/vendor/bin/hw/citadel_updater u:object_r:citadel_updater_exec:s0
/vendor/bin/CitadelProvision u:object_r:citadel_provision_exec:s0
/vendor/bin/hw/hardware\.google\.light@1\.0-service u:object_r:hal_light_default_exec:s0
/vendor/bin/hw/vendor\.google\.airbrush@1\.0-service u:object_r:airbrush_exec:s0
/vendor/bin/hw/vendor\.google\.radioext@1\.0-service u:object_r:hal_radioext_default_exec:s0
/vendor/bin/hw/wait_for_strongbox u:object_r:wait_for_strongbox_exec:s0
/vendor/bin/init\.firstboot\.sh u:object_r:init-firstboot_exec:s0
/vendor/bin/init\.insmod\.sh u:object_r:init-insmod-sh_exec:s0
/vendor/bin/color_init u:object_r:color_init_exec:s0
/vendor/bin/init\.ramoops\.sh u:object_r:ramoops_exec:s0
/vendor/bin/modem_svc u:object_r:modem_svc_exec:s0
/vendor/bin/ramoops u:object_r:ramoops_exec:s0
/vendor/bin/hw/android\.hardware\.dumpstate@1\.0-service\.bramble u:object_r:hal_dumpstate_impl_exec:s0
/vendor/bin/ramdump u:object_r:ramdump_exec:s0
/vendor/bin/rlsservice u:object_r:rlsservice_exec:s0
/vendor/bin/init\.radio\.sh u:object_r:init_radio_exec:s0
/vendor/bin/hw/vendor\.google\.wifi_ext@1\.0-service-vendor u:object_r:hal_wifi_ext_exec:s0
/vendor/bin/tcpdump_logger u:object_r:tcpdump_logger_exec:s0
/vendor/bin/hw/vendor\.google\.wireless_charger@1\.0-service-vendor u:object_r:hal_wlc_exec:s0
/vendor/bin/hw/android\.hardware\.graphics\.composer@2\.3-service-sm8150 u:object_r:hal_graphics_composer_default_exec:s0
/vendor/bin/hw/init_dp.sh u:object_r:init_dp_exec:s0
# Vendor libs that are exposed to apps (those listed in /vendor/etc/public.libraries.txt
# and their dependencies)
/vendor/lib(64)?/libairbrush-pixel\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/vendor\.google\.airbrush\.manager@1\.0\.so u:object_r:same_process_hal_file:s0
/mnt/vendor/persist/battery(/.*)? u:object_r:persist_battery_file:s0
/mnt/vendor/persist/haptics(/.*)? u:object_r:persist_haptics_file:s0
# data files
/data/vendor/hardware/airbrush/manager(/.*)? u:object_r:airbrush_data_file:s0
/data/vendor/modem_stat/debug\.txt u:object_r:modem_stat_data_file:s0
/data/vendor/modem_dump(/.*)? u:object_r:modem_dump_file:s0
/data/vendor/tcpdump_logger(/.*)? u:object_r:tcpdump_vendor_data_file:s0
/data/vendor_ce/[0-9]+/ramoops(/.*)? u:object_r:ramoops_vendor_data_file:s0
/data/vendor/ese(/.*)? u:object_r:ese_vendor_data_file:s0
/data/vendor/hal_neuralnetworks_darwinn/hal_camera(/.*)? u:object_r:hal_neuralnetworks_darwinn_hal_camera_data_file:s0
/data/vendor/camera_calibration(/.*)? u:object_r:camera_calibration_vendor_data_file:s0
/data/vendor/face(/.*)? u:object_r:face_vendor_data_file:s0
# dev socket node
/dev/socket/diag_router u:object_r:diag_socket:s0

162
vendor/google/genfs_contexts vendored Normal file
View File

@@ -0,0 +1,162 @@
genfscon debugfs /f2fs u:object_r:debugfs_f2fs:s0
genfscon debugfs /ufshcd0 u:object_r:debugfs_ufs:s0
genfscon proc /sys/kernel/sched_boost u:object_r:proc_sysctl_schedboost:s0
genfscon sysfs /devices/soc0 u:object_r:sysfs_soc:s0
genfscon sysfs /devices/platform/soc/1d84000.ufshc/slowio_read_cnt u:object_r:sysfs_scsi_devices_0000:s0
genfscon sysfs /devices/platform/soc/1d84000.ufshc/slowio_write_cnt u:object_r:sysfs_scsi_devices_0000:s0
genfscon sysfs /devices/platform/soc/1d84000.ufshc/slowio_unmap_cnt u:object_r:sysfs_scsi_devices_0000:s0
genfscon sysfs /devices/platform/soc/1d84000.ufshc/slowio_sync_cnt u:object_r:sysfs_scsi_devices_0000:s0
genfscon sysfs /devices/platform/soc/1d84000.ufshc/manual_gc u:object_r:sysfs_scsi_devices_0000:s0
genfscon proc /sys/vm/swappiness u:object_r:proc_swappiness:s0
genfscon proc /fs/f2fs u:object_r:proc_f2fs:s0
genfscon proc /irq u:object_r:proc_irq:s0
genfscon sysfs /bus/iio/devices u:object_r:sysfs_iio_devices:s0
# Touch
genfscon sysfs /devices/platform/soc/890000.spi/spi_master/spi1/spi1.0 u:object_r:sysfs_touch:s0
genfscon proc /fts/driver_test u:object_r:proc_touch:s0
# PowerHal
genfscon sysfs /devices/platform/soc/ae00000.qcom,mdss_mdp u:object_r:sysfs_msm_subsys:s0
genfscon sysfs /devices/platform/soc/2c00000.qcom,kgsl-3d0 u:object_r:sysfs_msm_subsys:s0
genfscon sysfs /devices/platform/soc/soc:qcom,gpubw u:object_r:sysfs_msm_subsys:s0
genfscon sysfs /devices/platform/soc/soc:qcom,gpubw/devfreq u:object_r:sysfs_msm_subsys:s0
genfscon sysfs /devices/platform/soc/soc:qcom,cpu-cpu-llcc-bw u:object_r:sysfs_msm_subsys:s0
genfscon sysfs /devices/platform/soc/soc:qcom,cpu-cpu-llcc-bw/devfreq u:object_r:sysfs_msm_subsys:s0
genfscon sysfs /devices/platform/soc/soc:qcom,cpu-llcc-ddr-bw u:object_r:sysfs_msm_subsys:s0
genfscon sysfs /devices/platform/soc/soc:qcom,cpu-llcc-ddr-bw/devfreq u:object_r:sysfs_msm_subsys:s0
genfscon sysfs /devices/platform/soc/soc:qcom,cpu0-cpu-l3-lat u:object_r:sysfs_msm_subsys:s0
genfscon sysfs /devices/platform/soc/soc:qcom,cpu4-cpu-l3-lat u:object_r:sysfs_msm_subsys:s0
genfscon sysfs /devices/platform/soc/soc:qcom,cpu0-cpu-l3-lat/devfreq u:object_r:sysfs_msm_subsys:s0
genfscon sysfs /devices/platform/soc/soc:qcom,cpu4-cpu-l3-lat/devfreq u:object_r:sysfs_msm_subsys:s0
genfscon sysfs /devices/platform/soc/1d84000.ufshc/clkgate_enable u:object_r:sysfs_scsi_devices_0000:s0
genfscon sysfs /devices/platform/soc/1d84000.ufshc/hibern8_on_idle_enable u:object_r:sysfs_scsi_devices_0000:s0
genfscon debugfs /sched_features u:object_r:debugfs_sched_features:s0
# PowerStatsHal
genfscon sysfs /power/system_sleep/stats u:object_r:sysfs_power_stats:s0
genfscon sysfs /power/rpmh_stats/master_stats u:object_r:sysfs_power_stats:s0
genfscon sysfs /kernel/wlan/power_stats u:object_r:sysfs_power_stats:s0
genfscon sysfs /devices/platform/soc/soc:abc-sm/state_stats
u:object_r:sysfs_power_stats:s0
genfscon sysfs /devices/platform/soc/880000.i2c/i2c-1/1-0010/iio:device3
u:object_r:sysfs_power_stats:s0
genfscon sysfs /devices/platform/soc/880000.i2c/i2c-1/1-0011/iio:device3
u:object_r:sysfs_power_stats:s0
genfscon sysfs /devices/platform/soc/a84000.i2c/i2c-2/2-0010/iio:device4
u:object_r:sysfs_power_stats:s0
genfscon sysfs /devices/platform/soc/89c000.i2c/i2c-2/2-0011/iio:device3
u:object_r:sysfs_power_stats:s0
genfscon sysfs /devices/platform/soc/a84000.i2c/i2c-3/3-0010/iio:device4
u:object_r:sysfs_power_stats:s0
genfscon sysfs /devices/platform/soc/a84000.i2c/i2c-2/2-0008/power_stats
u:object_r:sysfs_power_stats:s0
genfscon sysfs /devices/platform/soc/a84000.i2c/i2c-3/3-0008/power_stats
u:object_r:sysfs_power_stats:s0
# Not used by PowerStatsHal
genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-00/c440000.qcom,spmi:qcom,pm8150@0:vadc@3100/iio:device0
u:object_r:sysfs_power_stats_ignore:s0
genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-02/c440000.qcom,spmi:qcom,pm8150b@2:vadc@3100/iio:device1
u:object_r:sysfs_power_stats_ignore:s0
genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-04/c440000.qcom,spmi:qcom,pm8150l@4:vadc@3100/iio:device2
u:object_r:sysfs_power_stats_ignore:s0
# Display
genfscon sysfs /devices/platform/soc/soc:qcom,dsi-display-primary/backlight u:object_r:sysfs_leds:s0
genfscon sysfs /devices/platform/soc/soc:qcom,dsi-display-primary/backlight/panel0-backlight/vr_mode u:object_r:sysfs_lights:s0
genfscon sysfs /devices/platform/soc/soc:qcom,dsi-display-primary/panel_info u:object_r:sysfs_display:s0
# PMIC
genfscon debugfs /regmap/spmi0-05/address u:object_r:debugfs_pmic:s0
genfscon debugfs /regmap/spmi0-05/count u:object_r:debugfs_pmic:s0
genfscon debugfs /regmap/spmi0-05/data u:object_r:debugfs_pmic:s0
# Vibrator
# EVT 1.0 and older
genfscon sysfs /devices/platform/soc/c94000.i2c/i2c-3/3-0043 u:object_r:sysfs_vibrator:s0
# EVT 1.1 and newer
genfscon sysfs /devices/platform/soc/c94000.i2c/i2c-4/4-0043 u:object_r:sysfs_vibrator:s0
# Camera
genfscon sysfs /devices/platform/soc/ac4a000.qcom,cci u:object_r:sysfs_camera:s0
genfscon sysfs /devices/platform/soc/ac4b000.qcom,cci u:object_r:sysfs_camera:s0
# Device config (device build)
genfscon sysfs /firmware/devicetree/base/chosen/cdt/cdb2/devcfg u:object_r:sysfs_devcfg:s0
# eSIM status
genfscon sysfs /firmware/devicetree/base/chosen/cdt/cdb2/esim u:object_r:sysfs_esim:s0
# Battery
genfscon sysfs /devices/platform/soc/soc:google,battery/power_supply/battery u:object_r:sysfs_batteryinfo:s0
genfscon sysfs /devices/platform/soc/880000.i2c/i2c-1/1-0036/power_supply/maxfg u:object_r:sysfs_batteryinfo:s0
genfscon sysfs /devices/platform/soc/89c000.i2c/i2c-2/2-0036/power_supply/maxfg u:object_r:sysfs_batteryinfo:s0
genfscon sysfs /devices/platform/soc/880000.i2c/i2c-1/1-0061 u:object_r:sysfs_wlc:s0
genfscon sysfs /devices/platform/soc/880000.i2c/i2c-1/1-0061/power_supply u:object_r:sysfs_batteryinfo:s0
genfscon sysfs /devices/platform/soc/880000.i2c/i2c-1/1-0061/power_supply/wireless u:object_r:sysfs_batteryinfo:s0
genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-02/c440000.qcom,spmi:qcom,pm8150b@2:google,bms/power_supply/charger u:object_r:sysfs_batteryinfo:s0
genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-02/c440000.qcom,spmi:qcom,pm8150b@2:qcom,usb-pdphy@1700/usbpd0/power_supply u:object_r:sysfs_batteryinfo:s0
genfscon debugfs /regmap/1-0036/ u:object_r:debugfs_batteryinfo:s0
genfscon debugfs /regmap/1-000b/ u:object_r:debugfs_batteryinfo:s0
genfscon debugfs /regmap/2-0036/ u:object_r:debugfs_batteryinfo:s0
genfscon debugfs /regmap/2-000b/ u:object_r:debugfs_batteryinfo:s0
genfscon debugfs /logbuffer/ssoc u:object_r:debugfs_batteryinfo:s0
genfscon debugfs /logbuffer/batt_ce u:object_r:debugfs_batteryinfo:s0
genfscon debugfs /logbuffer/wireless u:object_r:debugfs_batteryinfo:s0
genfscon debugfs /google_charger u:object_r:debugfs_batteryinfo:s0
genfscon debugfs /google_battery u:object_r:debugfs_batteryinfo:s0
# Pixelstats
genfscon sysfs /devices/virtual/misc/msm_cirrus_playback/resistance_left_right u:object_r:sysfs_pixelstats:s0
genfscon sysfs /devices/platform/soc/soc:google,overheat_mitigation u:object_r:sysfs_pixelstats:s0
genfscon sysfs /devices/platform/soc/a8c000.spi/spi_master/spi4/spi4.0/iaxxx-dev/iaxxx_misc/codec_state u:object_r:sysfs_pixelstats:s0
genfscon sysfs /devices/platform/soc/a8c000.spi/spi_master/spi4/spi4.0/iaxxx-dev/iaxxx_misc/wdsp_stat u:object_r:sysfs_pixelstats:s0
genfscon sysfs /devices/platform/soc/a8c000.spi/spi_master/spi5/spi5.0/iaxxx-dev/iaxxx_misc/codec_state u:object_r:sysfs_pixelstats:s0
genfscon sysfs /devices/platform/soc/a8c000.spi/spi_master/spi5/spi5.0/iaxxx-dev/iaxxx_misc/wdsp_stat u:object_r:sysfs_pixelstats:s0
# Audio Dsp for HardwareInfo
genfscon sysfs /devices/platform/soc/a8c000.spi/spi_master/spi4/spi4.0/iaxxx-dev/iaxxx_misc/hwinfo_part_number u:object_r:sysfs_audio:s0
genfscon sysfs /devices/platform/soc/a8c000.spi/spi_master/spi5/spi5.0/iaxxx-dev/iaxxx_misc/hwinfo_part_number u:object_r:sysfs_audio:s0
# Knowles framework info
genfscon sysfs /devices/platform/soc/a8c000.spi/spi_master/spi5/spi5.0/iaxxx/fw_version u:object_r:sysfs_knowles_info:s0
genfscon sysfs /devices/platform/soc/a8c000.spi/spi_master/spi5/spi5.0/iaxxx/host_version u:object_r:sysfs_knowles_info:s0
genfscon sysfs /devices/platform/soc/a8c000.spi/spi_master/spi5/spi5.0/iaxxx/package_version u:object_r:sysfs_knowles_info:s0
genfscon sysfs /devices/platform/soc/a8c000.spi/spi_master/spi5/spi5.0/iaxxx/plugin_version u:object_r:sysfs_knowles_info:s0
# init_citadel might need to read this
genfscon sysfs /firmware/devicetree/base/qcom,board-id u:object_r:sysfs_msm_boardid:s0
# USB
genfscon debugfs /tcpm/usbpd0 u:object_r:debugfs_usb:s0
genfscon debugfs /logbuffer/usbpd u:object_r:debugfs_usb:s0
genfscon debugfs /logbuffer/smblib u:object_r:debugfs_usb:s0
genfscon debugfs /logbuffer/pps u:object_r:debugfs_usb:s0
# Airbrush
genfscon sysfs /devices/platform/soc/soc:abc-sm u:object_r:sysfs_airbrush:s0
genfscon sysfs /devices/platform/soc/c84000.i2c/i2c-4/4-0066 u:object_r:sysfs_airbrush_dumpstate:s0
genfscon sysfs /devices/platform/soc/c84000.i2c/i2c-5/5-0066 u:object_r:sysfs_airbrush_dumpstate:s0
genfscon debugfs /faceauth u:object_r:debugfs_airbrush:s0
genfscon debugfs /airbrush u:object_r:debugfs_airbrush:s0
# Dumpstate hal
genfscon debugfs /dma_buf/bufinfo u:object_r:debugfs_dma_buf:s0
genfscon debugfs /dma_buf/dmaprocs u:object_r:debugfs_dma_buf:s0
# Power
genfscon debugfs /clk/debug_suspend u:object_r:debugfs_clk:s0
# ramoops
genfscon sysfs /devices/virtual/ramoops/pstore/aes_key u:object_r:sysfs_pstore:s0
genfscon sysfs /devices/virtual/ramoops/pstore/aes_key_iv u:object_r:sysfs_pstore:s0
genfscon sysfs /devices/virtual/ramoops/pstore/aes_key_tag u:object_r:sysfs_pstore:s0
genfscon sysfs /devices/virtual/ramoops/pstore/use_alt u:object_r:sysfs_pstore:s0
# pmic
genfscon debugfs /pmic-votable u:object_r:debugfs_pmic:s0
# USB contaminant detection
genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-02/c440000.qcom,spmi:qcom,pm8150b@2:qcom,qpnp-smb5/power_supply/usb/moisture_detected u:object_r:sysfs_contaminant:s0
genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-02/c440000.qcom,spmi:qcom,pm8150b@2:qcom,qpnp-smb5/power_supply/usb/moisture_detection_enabled u:object_r:sysfs_contaminant:s0

1
vendor/google/google_touch_app.te vendored Normal file
View File

@@ -0,0 +1 @@
type google_touch_app, domain;

1
vendor/google/grilservice_app.te vendored Normal file
View File

@@ -0,0 +1 @@
type grilservice_app, domain;

3
vendor/google/hal_authsecret_citadel.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type hal_authsecret_citadel, domain;
type hal_authsecret_citadel_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_authsecret_citadel)

3
vendor/google/hal_dumpstate_impl.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type hal_dumpstate_impl, domain;
type hal_dumpstate_impl_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_dumpstate_impl)

3
vendor/google/hal_keymaster_citadel.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type hal_keymaster_citadel, domain;
type hal_keymaster_citadel_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_keymaster_citadel)

3
vendor/google/hal_neuralnetworks_darwinn.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type hal_neuralnetworks_darwinn, domain;
type hal_neuralnetworks_darwinn_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_neuralnetworks_darwinn)

3
vendor/google/hal_oemlock_citadel.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type hal_oemlock_citadel, domain;
type hal_oemlock_citadel_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_oemlock_citadel)

3
vendor/google/hal_radioext_default.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type hal_radioext_default, domain;
type hal_radioext_default_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_radioext_default)

3
vendor/google/hal_usb_impl.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type hal_usb_impl, domain;
type hal_usb_impl_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_usb_impl)

3
vendor/google/hal_weaver_citadel.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type hal_weaver_citadel, domain;
type hal_weaver_citadel_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_weaver_citadel)

3
vendor/google/hal_wifi_ext.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type hal_wifi_ext, domain;
type hal_wifi_ext_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_wifi_ext)

3
vendor/google/hal_wlc.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type hal_wlc, domain;
type hal_wlc_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_wlc)

6
vendor/google/hwservice.te vendored Normal file
View File

@@ -0,0 +1,6 @@
type hal_pixelstats_hwservice, hwservice_manager_type;
type hal_airbrush_hwservice, hwservice_manager_type;
type hal_darwinn_hwservice, hwservice_manager_type;
type hal_radioext_hwservice, hwservice_manager_type;
type hal_wifi_ext_hwservice, hwservice_manager_type;
type hal_wlc_hwservice, hwservice_manager_type;

7
vendor/google/hwservice_contexts vendored Normal file
View File

@@ -0,0 +1,7 @@
hardware.google.pixelstats::IPixelStats u:object_r:hal_pixelstats_hwservice:s0
hardware.google.light::ILight u:object_r:hal_light_hwservice:s0
vendor.google.airbrush.manager::IAirbrushManager u:object_r:hal_airbrush_hwservice:s0
vendor.google.darwinn.service::IDarwinnService u:object_r:hal_darwinn_hwservice:s0
vendor.google.radioext::IRadioExt u:object_r:hal_radioext_hwservice:s0
vendor.google.wifi_ext::IWifiExt u:object_r:hal_wifi_ext_hwservice:s0
vendor.google.wireless_charger::IWirelessCharger u:object_r:hal_wlc_hwservice:s0

3
vendor/google/init-firstboot.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type init-firstboot, domain;
type init-firstboot_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(init-firstboot)

3
vendor/google/init-insmod-sh.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type init-insmod-sh, domain;
type init-insmod-sh_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(init-insmod-sh)

4
vendor/google/init_citadel.te vendored Normal file
View File

@@ -0,0 +1,4 @@
type init_citadel, domain;
type init_citadel_exec, exec_type, vendor_file_type, file_type;
type citadel_updater_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(init_citadel)

3
vendor/google/init_dp.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type init_dp, domain;
type init_dp_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(init_dp)

3
vendor/google/init_radio.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type init_radio, domain;
type init_radio_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(init_radio)

6
vendor/google/keys.conf vendored Normal file
View File

@@ -0,0 +1,6 @@
[@GOOGLE]
ALL : device/google/coral-sepolicy/vendor/google/certs/app.x509.pem
[@GOOGLEPULSE]
ALL : device/google/coral-sepolicy/vendor/google/certs/pulse-release.x509.pem

1
vendor/google/logger_app.te vendored Normal file
View File

@@ -0,0 +1 @@
type logger_app, domain;

30
vendor/google/mac_permissions.xml vendored Normal file
View File

@@ -0,0 +1,30 @@
<?xml version="1.0" encoding="utf-8"?>
<policy>
<!--
* A signature is a hex encoded X.509 certificate or a tag defined in
keys.conf and is required for each signer tag.
* A signer tag may contain a seinfo tag and multiple package stanzas.
* A default tag is allowed that can contain policy for all apps not signed with a
previously listed cert. It may not contain any inner package stanzas.
* Each signer/default/package tag is allowed to contain one seinfo tag. This tag
represents additional info that each app can use in setting a SELinux security
context on the eventual process.
* When a package is installed the following logic is used to determine what seinfo
value, if any, is assigned.
- All signatures used to sign the app are checked first.
- If a signer stanza has inner package stanzas, those stanza will be checked
to try and match the package name of the app. If the package name matches
then that seinfo tag is used. If no inner package matches then the outer
seinfo tag is assigned.
- The default tag is consulted last if needed.
-->
<!-- google apps key -->
<signer signature="@GOOGLE" >
<seinfo value="google" />
</signer>
<signer signature="@GOOGLEPULSE" >
<seinfo value="googlepulse" />
</signer>
</policy>

2
vendor/google/modem_diagnostics.te vendored Normal file
View File

@@ -0,0 +1,2 @@
type modem_diagnostic_app, domain;
type modem_diagnostic_app_tmpfs, file_type;

3
vendor/google/modem_svc.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type modem_svc, domain;
type modem_svc_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(modem_svc)

1
vendor/google/oslo_app.te vendored Normal file
View File

@@ -0,0 +1 @@
type oslo_app, domain;

2
vendor/google/pixelstats.te vendored Normal file
View File

@@ -0,0 +1,2 @@
hal_attribute(pixelstats)type pixelstats_system, domain, coredomain;
init_daemon_domain(pixelstats_system)type pixelstats_system_exec, exec_type, file_type, system_file_type;

3
vendor/google/pixelstats_vendor.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type pixelstats_vendor, domain;
type pixelstats_vendor_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(pixelstats_vendor)

11
vendor/google/property.te vendored Normal file
View File

@@ -0,0 +1,11 @@
type vendor_thermal_prop, property_type;
type power_prop, property_type;
type vendor_tcpdump_log_prop, property_type;
type vendor_faceauth_prop, property_type;
type vendor_build_type_prop, property_type;
type vendor_aware_available_prop, property_type;
type vendor_modem_prop, property_type;
type camera_ro_prop, property_type;
type vendor_ramoops_prop, property_type;
type ecoservice_prop, property_type;
type vendor_shutdown_prop, property_type;

71
vendor/google/property_contexts vendored Normal file
View File

@@ -0,0 +1,71 @@
persist.vendor.radio.RATE_ADAPT_ENABLE u:object_r:vendor_radio_prop:s0
persist.vendor.radio.ROTATION_ENABLE u:object_r:vendor_radio_prop:s0
persist.vendor.radio.VT_ENABLE u:object_r:vendor_radio_prop:s0
persist.vendor.radio.VT_HYBRID_ENABLE u:object_r:vendor_radio_prop:s0
persist.vendor.radio.videopause.mode u:object_r:vendor_radio_prop:s0
persist.vendor.radio.smlog_switch u:object_r:vendor_radio_prop:s0
ro.vendor.radio.log_loc u:object_r:vendor_radio_prop:s0
ro.vendor.radio.log_prefix u:object_r:vendor_radio_prop:s0
persist.audio.fluence.voicecomm u:object_r:vendor_audio_prop:s0
audio.adm.buffering.ms u:object_r:vendor_audio_prop:s0
vendor.all.modules.ready u:object_r:vendor_device_prop:s0
vendor.all.devices.ready u:object_r:vendor_device_prop:s0
vendor.thermal.config u:object_r:vendor_thermal_prop:s0
ro.boot.usbcontroller u:object_r:vendor_usb_prop:s0
ro.boot.hardware.platform u:object_r:public_vendor_default_prop:s0
vendor.powerhal.state u:object_r:power_prop:s0
vendor.powerhal.audio u:object_r:power_prop:s0
vendor.powerhal.lpm u:object_r:power_prop:s0
vendor.powerhal.init u:object_r:power_prop:s0
vendor.powerhal.rendering u:object_r:power_prop:s0
vendor.display.primary_red u:object_r:vendor_display_prop:s0
vendor.display.primary_green u:object_r:vendor_display_prop:s0
vendor.display.primary_blue u:object_r:vendor_display_prop:s0
vendor.display.primary_white u:object_r:vendor_display_prop:s0
vendor.display.native_display_primaries_ready u:object_r:vendor_display_prop:s0
# Tcpdump_logger
persist.vendor.tcpdump.log.alwayson u:object_r:vendor_tcpdump_log_prop:s0
vendor.tcpdump.log.ondemand u:object_r:vendor_tcpdump_log_prop:s0
vendor.tcpdump.log.alwayson u:object_r:vendor_tcpdump_log_prop:s0
vendor.tcpdump.output.dir u:object_r:vendor_tcpdump_log_prop:s0
#face HAL
vendor.faceauth.debug u:object_r:vendor_faceauth_prop:s0
vendor.faceauth.debug_entries u:object_r:vendor_faceauth_prop:s0
vendor.faceauth.fake_camera_path u:object_r:vendor_faceauth_prop:s0
vendor.faceauth.smudge_ux_threshold u:object_r:vendor_faceauth_prop:s0
vendor.faceauth.trace u:object_r:vendor_faceauth_prop:s0
vendor.faceauth.use_fake_camera u:object_r:vendor_faceauth_prop:s0
vendor.faceauth.use_secure_camera u:object_r:vendor_faceauth_prop:s0
persist.vendor.faceauth.use_disk_cache u:object_r:vendor_faceauth_prop:s0
persist.vendor.faceauth.require_calibration u:object_r:vendor_faceauth_prop:s0
persist.vendor.faceauth.run_autocal u:object_r:vendor_faceauth_prop:s0
persist.vendor.faceauth.run_autocal_on_success u:object_r:vendor_faceauth_prop:s0
persist.vendor.faceauth.split_autocal u:object_r:vendor_faceauth_prop:s0
persist.vendor.faceauth.pose_bucket_stages u:object_r:vendor_faceauth_prop:s0
persist.vendor.faceauth.selection_tuning_frames u:object_r:vendor_faceauth_prop:s0
persist.vendor.shutdown. u:object_r:vendor_shutdown_prop:s0
# Google camera hal read only props
ro.vendor.camera. u:object_r:camera_ro_prop:s0
ro.vendor.camera.res.fmq.size u:object_r:camera_ro_prop:s0
ro.vendor.camera.req.fmq.size u:object_r:camera_ro_prop:s0
ro.vendor.build.type u:object_r:vendor_build_type_prop:s0
ro.vendor.aware_available u:object_r:vendor_aware_available_prop:s0
persist.vendor.modem. u:object_r:vendor_modem_prop:s0
persist.vendor.mdm. u:object_r:vendor_modem_prop:s0
# ramoops
vendor.ramoops. u:object_r:vendor_ramoops_prop:s0

3
vendor/google/ramdump.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type ramdump_exec, exec_type, vendor_file_type, file_type;
type ramdump, domain;
init_daemon_domain(ramdump)

1
vendor/google/ramdump_app.te vendored Normal file
View File

@@ -0,0 +1 @@
type ramdump_app, domain;

3
vendor/google/ramoops.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type ramoops, domain;
type ramoops_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(ramoops);

3
vendor/google/rlsservice.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type rlsservice, domain;
type rlsservice_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(rlsservice)

24
vendor/google/seapp_contexts vendored Normal file
View File

@@ -0,0 +1,24 @@
# Domain for Ramdump
user=system seinfo=platform name=com.google.SSRestartDetector domain=ssr_detector_app type=system_app_data_file
user=_app seinfo=platform name=com.android.ramdump domain=ramdump_app type=app_data_file levelFrom=all
# Domain for grilservice
user=_app isPrivApp=true seinfo=platform name=com.google.android.grilservice domain=grilservice_app levelFrom=all
# Domain for Modem Diagnostic System
user=_app seinfo=google name=com.google.mds domain=modem_diagnostic_app type=app_data_file levelFrom=user
# Domain for Pixel Logger
user=_app seinfo=platform name=com.android.pixellogger domain=logger_app type=app_data_file levelFrom=all
# Domain for Oslo
user=_app seinfo=platform name=com.google.oslo domain=oslo_app type=app_data_file levelFrom=all
# Domain for GoogleCBRS app
user=_app seinfo=platform name=com.google.googlecbrs domain=cbrs_setup_app type=app_data_file levelFrom=user
# Domain for FaceDebugService
user=_app seinfo=platform name=com.google.android.facedebug domain=face_debug type=app_data_file levelFrom=all
# Domain for Touch app
user=_app seinfo=platform name=com.google.touch.touchinspector domain=google_touch_app type=app_data_file levelFrom=user

1
vendor/google/ssr_detector.te vendored Normal file
View File

@@ -0,0 +1 @@
type ssr_detector_app, domain;

3
vendor/google/tcpdump_logger.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type tcpdump_logger, domain;
type tcpdump_logger_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(tcpdump_logger)

1
vendor/google/vendor_init.te vendored Normal file
View File

@@ -0,0 +1 @@
type vendor_init_exec, exec_type, vendor_file_type, file_type;

6
vendor/google/vndservice.te vendored Normal file
View File

@@ -0,0 +1,6 @@
type citadeld_service, vndservice_manager_type;
type rls_service, vndservice_manager_type;
type power_stats_service, vndservice_manager_type;
type airbrush_faceauth_service, vndservice_manager_type;
type airbrush_tpu_service, vndservice_manager_type;
type eco_service, vndservice_manager_type;

7
vendor/google/vndservice_contexts vendored Normal file
View File

@@ -0,0 +1,7 @@
android.hardware.citadel.ICitadeld u:object_r:citadeld_service:s0
rlsservice u:object_r:rls_service:s0
airbrush_faceauth u:object_r:airbrush_faceauth_service:s0
airbrush_tpu u:object_r:airbrush_tpu_service:s0
power.stats-vendor u:object_r:power_stats_service:s0
media.ecoservice u:object_r:eco_service:s0

3
vendor/google/wait_for_strongbox.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type wait_for_strongbox, domain;
type wait_for_strongbox_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(wait_for_strongbox)

3
vendor/qcom/common/adpl.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type adpl, domain;
type adpl_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(adpl)

3
vendor/qcom/common/adsprpcd.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type adsprpcd, domain;
type adsprpcd_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(adsprpcd)

3
vendor/qcom/common/atfwd.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type atfwd, domain;
type atfwd_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(atfwd)

1
vendor/qcom/common/attributes vendored
View File

@@ -1 +1,2 @@
attribute vendor_persist_type;
attribute hal_display_color;

3
vendor/qcom/common/audiod.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type audiod, domain;
type audiod_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(audiod)

3
vendor/qcom/common/cdsprpcd.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type cdsprpcd, domain;
type cdsprpcd_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(cdsprpcd)

3
vendor/qcom/common/charger_monitor.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type charger_monitor, domain;
type charger_monitor_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(charger_monitor)

3
vendor/qcom/common/chre.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type chre, domain;
type chre_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(chre)

3
vendor/qcom/common/cnd.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type cnd, domain, mlstrustedsubject;
type cnd_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(cnd)

1
vendor/qcom/common/con_monitor.te vendored Normal file
View File

@@ -0,0 +1 @@
type con_monitor_app, domain;

69
vendor/qcom/common/device.te vendored Normal file
View File

@@ -0,0 +1,69 @@
type diag_device, dev_type, mlstrustedobject;
type smem_log_device, dev_type;
type hsic_device, dev_type;
type mhi_device, dev_type;
type bhi_device, dev_type;
type smd_device, dev_type;
type rmnet_device, dev_type;
type thermal_device, dev_type;
type vm_bms_device, dev_type;
type battery_data_device, dev_type;
type qdsp_device, dev_type, mlstrustedobject;
type dsp_device, dev_type;
type xdsp_device, dev_type;
type hvdcp_device, dev_type;
type device_latency, dev_type;
type fm_radio_device, dev_type;
type modem_efs_partition_device, dev_type;
type ssd_device, dev_type;
type rpmb_device, dev_type;
type sg_device, dev_type;
type dip_device, dev_type;
type mdtp_device, dev_type;
type sd_device, dev_type;
type ssd_block_device, dev_type;
type esoc_device, dev_type;
type ssr_device, dev_type;
type ramdump_device, dev_type;
type ksbridgehsic_device, dev_type;
type efsbridgehsic_device, dev_type;
type efs_boot_dev, dev_type;
type mba_debug_dev, dev_type;
type logdump_partition, dev_type;
type bootselect_device, dev_type;
type usb_uicc_device, dev_type;
type ipa_dev, dev_type;
type wcnss_device, dev_type;
type spcom_device, dev_type;
type skp_device, dev_type;
type sp_ssr_device, dev_type;
type sp_keymaster_device, dev_type;
type sec_nvm_device, dev_type;
type cryptoapp_device, dev_type;
type spdaemon_ssr_device, dev_type;
type modem_ssr_device, dev_type;
type qsee_ipc_irq_spss_device, dev_type;
type qdss_device, dev_type;
type gadget_serial_device, dev_type;
type pta_device, dev_type;
type bu21150_device, dev_type;
type hbtp_device, dev_type;
type qce_device, dev_type;
type rng_device, dev_type;
type system_health_monitor_device, dev_type;
type usf_device, dev_type;
type qbt1000_device, dev_type;
type avtimer_device, dev_type;
type at_device, dev_type;
type bt_device, dev_type;
type wlan_device, dev_type;
type rawdump_block_device, dev_type;
type custom_ab_block_device, dev_type;
type xbl_block_device, dev_type;
type gpt_block_device, dev_type;
type modem_block_device, dev_type;
type uefi_block_device, dev_type;
type persist_block_device, dev_type;
type npu_device, dev_type;
type devinfo_block_device, dev_type;
type latency_device, dev_type;

3
vendor/qcom/common/diag.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type diag, domain;
type diag_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(diag)

3
vendor/qcom/common/dtsconfigurator.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type dtsconfigurator, domain;
type dtsconfigurator_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(dtsconfigurator)

3
vendor/qcom/common/dtseagleservice.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type dtseagleservice, domain;
type dtseagleservice_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(dtseagleservice)

3
vendor/qcom/common/energyawareness.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type energyawareness, domain;
type energyawareness_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(energyawareness)

3
vendor/qcom/common/esepmdaemon.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type esepmdaemon, domain;
type esepmdaemon_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(esepmdaemon)

1
vendor/qcom/common/factory_ota_app.te vendored Normal file
View File

@@ -0,0 +1 @@
type factory_ota_app, domain, coredomain;

3
vendor/qcom/common/fidodaemon.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type fidodaemon, domain;
type fidodaemon_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(fidodaemon)

192
vendor/qcom/common/file.te vendored
View File

@@ -1,3 +1,191 @@
# used for /dsp files
type firmware_file, file_type, contextmount_type, vendor_file_type;
type vendor_firmware_file, vendor_file_type, file_type;
type qmuxd_socket, file_type;
type netmgrd_socket, file_type;
type vendor_qti_data_file, file_type, data_file_type;
type proc_wifi_dbg, proc_type, fs_type;
type proc_swappiness, proc_type, fs_type;
type pps_socket, file_type;
type qdcmsocket_socket, file_type;
type cnd_socket, file_type, mlstrustedobject;
type cnd_data_file, file_type, data_file_type;
type chre_socket, file_type;
type sysfs_hsic_modem_wait, sysfs_type, fs_type;
type sysfs_smd_open_timeout, sysfs_type, fs_type;
type sysfs_soc, sysfs_type, fs_type;
type sysfs_msm_subsys, sysfs_type, fs_type;
type sysfs_spss, sysfs_type, fs_type;
type sysfs_faceauth, sysfs_type, fs_type;
type netmgrd_data_file, file_type, data_file_type;
type sysrq_trigger_proc, fs_type, mlstrustedobject;
type persist_file, file_type, vendor_persist_type;
type persist_bluetooth_file, file_type , vendor_persist_type;
type persist_camera_file, file_type , vendor_persist_type;
type persist_data_file, file_type , vendor_persist_type;
type persist_drm_file, file_type , vendor_persist_type;
type data_qtee_file, file_type, data_file_type;
type vendor_persist_mmi_file, file_type, vendor_persist_type;
type persist_misc_file, file_type , vendor_persist_type;
type persist_bms_file, file_type , vendor_persist_type;
type persist_secnvm_file, file_type , vendor_persist_type;
type persist_hvdcp_file, file_type , vendor_persist_type;
type persist_audio_file, file_type , vendor_persist_type;
type proc_audiod, fs_type, proc_type;
type proc_sysctl_schedboost, proc_type, fs_type;
type proc_irq, fs_type, proc_type;
type sysfs_irq, fs_type, sysfs_type;
type irqbalance_socket, file_type;
type sensors_socket, file_type;
type sensors_persist_file, file_type, vendor_persist_type;
type sysfs_sensors, sysfs_type, fs_type;
type thermal_socket, file_type;
type sysfs_msmuart_file, sysfs_type, fs_type;
type rfs_system_file, system_file_type, file_type;
type rfs_file, file_type, data_file_type;
type rfs_shared_hlos_file, file_type, data_file_type;
type persist_rfs_file, file_type, vendor_persist_type;
type persist_rfs_shared_hlos_file, file_type, vendor_persist_type;
type data_ad_calib_cfg, file_type, data_file_type;
type sysfs_graphics, sysfs_type, fs_type;
type sysfs_usb_supply, sysfs_type, fs_type;
type sysfs_battery_supply, sysfs_type, fs_type;
type sysfs_usbpd_device, sysfs_type, fs_type;
type sysfs_vadc_dev, sysfs_type, fs_type;
type sysfs_spmi_dev, sysfs_type, fs_type;
type sysfs_qdss_dev, sysfs_type, fs_type;
type sysfs_poweron_alarm, sysfs_type, fs_type;
type sysfs_mpdecision, fs_type, sysfs_type;
type sysfs_rqstats, fs_type, sysfs_type;
type sysfs_cpu_online, fs_type, sysfs_type;
type mpctl_socket, file_type, mlstrustedobject;
type mpctl_data_file, file_type, data_file_type;
type lm_data_file, file_type, data_file_type;
type sysfs_devfreq, fs_type, sysfs_type;
type sysfs_devfreq_l3cdsp, fs_type, sysfs_type;
type sysfs_mmc_host, fs_type, sysfs_type;
type sysfs_scsi_host, fs_type, sysfs_type;
type sysfs_cpu_boost, fs_type, sysfs_type;
type sysfs_msm_perf, fs_type, sysfs_type;
type sysfs_memory, fs_type, sysfs_type;
type sysfs_lib, fs_type, sysfs_type;
type sysfs_slpi, fs_type, sysfs_type;
type sysfs_process_reclaim, fs_type, sysfs_type;
type sysfs_vmpressure, fs_type, sysfs_type;
type sysfs_msm_boot, fs_type, sysfs_type;
type sysfs_timestamp_switch, sysfs_type, fs_type;
type gamed_socket, file_type;
type iop_socket, file_type;
type iop_data_file, file_type, data_file_type;
type ims_socket, file_type;
type mlid_socket, file_type, mlstrustedobject;
type ssgqmig_socket, file_type, mlstrustedobject;
type ssgtzd_socket, file_type, mlstrustedobject;
type location_data_file, file_type, data_file_type;
type location_socket, file_type, data_file_type;
type wifihal_socket, file_type;
type sysfs_esoc, sysfs_type, fs_type;
type sysfs_ssr, sysfs_type, fs_type;
type sysfs_ssr_writable, sysfs_type, fs_type;
type sysfs_ssr_toggle, sysfs_type, fs_type;
type sysfs_hsic, sysfs_type, fs_type;
type sysfs_hsic_host_rdy, sysfs_type, fs_type;
type sysfs_socinfo, fs_type, sysfs_type;
type sysfs_usb_uicc, sysfs_type, fs_type;
type qlogd_socket, file_type, mlstrustedobject;
type display_vendor_data_file, file_type, data_file_type;
type persist_display_file, file_type, vendor_persist_type;
type ipacm_socket, file_type;
type ipa_vendor_data_file, file_type, data_file_type;
type camera_vendor_data_file, file_type, data_file_type;
type vendor_audio_data_file, file_type, data_file_type;
type vendor_tombstone_data_file, file_type, data_file_type;
type port_bridge_data_file, file_type, data_file_type;
type bt_firmware_file, file_type, contextmount_type, vendor_file_type;
type proc_dirty_ratio, fs_type, proc_type;
type vendor_mmi_socket, file_type;
type hbtp_cfg_file, file_type, vendor_file_type;
type hbtp_log_file, file_type, data_file_type;
type hbtp_kernel_sysfs, fs_type, sysfs_type;
type persist_usf_file, file_type, vendor_persist_type;
type sysfs_rmtfs, sysfs_type, fs_type;
type qfp-daemon_data_file, file_type, data_file_type;
type persist_qti_fp_file, file_type, vendor_persist_type;
type qsee_svc_app_data_file, file_type, data_file_type;
type imshelper_app_data_file, file_type, data_file_type;
type RIDL_data_file, file_type, data_file_type;
type RIDL_socket, file_type, data_file_type;
type qti_logkit_priv_data_file, file_type, data_file_type;
type qti_logkit_pub_data_file, file_type, data_file_type;
type qti_logkit_priv_socket, file_type, data_file_type;
type qti_logkit_pub_socket, file_type, mlstrustedobject, data_file_type;
type adsprpcd_file, file_type, mlstrustedobject, vendor_file_type;
type mdtp_svc_app_data_file, file_type, data_file_type;
type regionalization_file, file_type , vendor_persist_type;
type vendor_carrier_file, file_type, vendor_file_type;
type swap_data_file, file_type, data_file_type;
type dynamic_nv_data_file, file_type, data_file_type;
type wifi_vendor_data_file, file_type, data_file_type;
type wifi_vendor_wpa_socket, file_type, data_file_type;
type wifi_vendor_hostapd_socket, file_type, data_file_type;
type hostapd_socket, file_type, data_file_type;
type vendor_mediadrm_data_file, file_type, data_file_type;
type wififtmd_socket, file_type;
type persist_alarm_file, file_type, vendor_persist_type;
type persist_time_file, file_type, vendor_persist_type;
type nfc_vendor_data_file, file_type, data_file_type;
type sysfs_kgsl, sysfs_type, fs_type;
type sysfs_kgsl_proc, sysfs_type, fs_type;
type sysfs_kgsl_snapshot, sysfs_type, fs_type;
type sysfs_securetouch, fs_type, sysfs_type;
type sysfs_data, fs_type, sysfs_type;
type sysfs_diag, fs_type, sysfs_type;
type sysfs_laser, fs_type, sysfs_type;
type vendor_qdma_data_file, file_type, data_file_type;
type qdma_socket, file_type;
type qti_debugfs, fs_type, debugfs_type;
type vendor_radio_data_file, file_type, data_file_type, mlstrustedobject;
type vendor_mbn_data_file, file_type, data_file_type;
type sysfs_uio_file, fs_type, sysfs_type;
type sysfs_irqbalance , sysfs_type, fs_type;
type vendor_vpp_data_file, file_type, data_file_type;
type persist_vpp_file, file_type, vendor_persist_type;
type vendor_camera_data_file, file_type, data_file_type;
type vendor_media_data_file, file_type, data_file_type;
type sensors_vendor_data_file, file_type, data_file_type;
type sysfs_bond0, fs_type, sysfs_type;
type sysfs_wigig, fs_type, sysfs_type;
type wigignpt_socket, file_type, data_file_type;
type wigig_hostapd_socket, file_type, data_file_type;
type sysfs_ea, fs_type, sysfs_type;
type sysfs_audio, fs_type, sysfs_type;
type audio_vendor_data_file, file_type, data_file_type;
type sysfs_msm_stats, fs_type, sysfs_type;
type sysfs_msm_power, fs_type, sysfs_type;
type sysfs_fm, sysfs_type, fs_type;
type sysfs_boot_adsp, sysfs_type, fs_type;
type data_tzstorage_file, file_type, data_file_type;
type tlocd_data_file, file_type, data_file_type;
type data_qsee_file, file_type, data_file_type;
type sysfs_sectouch, sysfs_type, fs_type;
type vendor_tui_data_file, file_type, data_file_type;
type vendor_bt_data_file, file_type, data_file_type;
type sysfs_jpeg, fs_type, sysfs_type;
type ramdump_vendor_data_file, file_type, data_file_type, mlstrustedobject;
type sysfs_npu, fs_type, sysfs_type;
type vendor_ramdump_data_file, file_type, data_file_type;
type vendor_mdmhelperdata_data_file, file_type, data_file_type;
type ssr_log_file, file_type, data_file_type;
typeattribute mnt_vendor_file vendor_persist_type;
type hal_neuralnetworks_data_file, file_type, data_file_type;
type mpss_rfs_data_file, data_file_type, file_type;
type rfs_tombstone_data_file, data_file_type, file_type;
type sysfs_msm_wlan, sysfs_type, fs_type;
type sysfs_scsi_devices_0000, sysfs_type, fs_type;
type debugfs_sched_features, debugfs_type, fs_type;
type debugfs_wlan, debugfs_type, fs_type;
type debugfs_ipc, debugfs_type, fs_type;
type debugfs_icnss, debugfs_type, fs_type;
type debugfs_ion, debugfs_type, fs_type;
type debugfs_tzdbg, debugfs_type, fs_type;
type cnss_vendor_data_file, file_type, data_file_type, mlstrustedobject;
type modem_fdr_file, file_type, data_file_type;

385
vendor/qcom/common/file_contexts vendored
View File

@@ -1,10 +1,389 @@
###################################
# adsp files
# System files
#
/dsp(/.*)? u:object_r:adsprpcd_file:s0
/(vendor|system/vendor)/bin/ATFWD-daemon u:object_r:atfwd_exec:s0
/(vendor|system/vendor)/bin/PktRspTest u:object_r:diag_exec:s0
/(vendor|system/vendor)/bin/audiod u:object_r:audiod_exec:s0
/(vendor|system/vendor)/bin/charger_monitor u:object_r:charger_monitor_exec:s0
/(vendor|system/vendor)/bin/hvdcp_opti u:object_r:hvdcp_exec:s0
/(vendor|system/vendor)/bin/cnd u:object_r:cnd_exec:s0
/(vendor|system/vendor)/bin/diag_callback_client u:object_r:diag_exec:s0
/(vendor|system/vendor)/bin/diag_dci_sample u:object_r:diag_exec:s0
/(vendor|system/vendor)/bin/diag_klog u:object_r:diag_exec:s0
/(vendor|system/vendor)/bin/diag_mdlog u:object_r:qlogd_exec:s0
/(vendor|system/vendor)/bin/drmdiagapp u:object_r:diag_exec:s0
/(vendor|system/vendor)/bin/diag_qshrink4_daemon u:object_r:diag_exec:s0
/(vendor|system/vendor)/bin/diag_socket_log u:object_r:diag_exec:s0
/(vendor|system/vendor)/bin/diag_uart_log u:object_r:diag_exec:s0
/(vendor|system/vendor)/bin/diag_buffering_test u:object_r:diag_exec:s0
/(vendor|system/vendor)/bin/irsc_util u:object_r:irsc_util_exec:s0
/(vendor|system/vendor)/bin/qrtr-cfg u:object_r:qrtr_exec:s0
/(vendor|system/vendor)/bin/qrtr-ns u:object_r:qrtr_exec:s0
/(vendor|system/vendor)/bin/init\.qcom\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.qcom\.class_core\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.qcom\.bt\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.qcom\.early_boot\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.class_main\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.qcom\.post_boot\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.qcom\.sensors\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.qcom\.usb\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.mdm\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.mdm\.crashdata\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.qcom\.syspart_fixup\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/hcidump.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/hsic\.control\.bt\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.ath3k\.bt\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.crda\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.qcom\.coex\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.qcom\.debug-sdm660\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.qcom\.debug\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.qcom\.efs\.sync\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.qti\.fm\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.qcom\.sdio\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.qcom\.uicc\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.qcom\.wifi\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.qti\.ims\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/init\.sensors\.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/qca6234-service.sh u:object_r:qti_init_shell_exec:s0
/(vendor|system/vendor)/bin/mm-pp-daemon u:object_r:mm-pp-daemon_exec:s0
/(vendor|system/vendor)/bin/mm-pp-dpps u:object_r:mm-pp-daemon_exec:s0
/(vendor|system/vendor)/bin/mmi u:object_r:vendor_mmi_exec:s0
/(vendor|system/vendor)/bin/mmid u:object_r:vendor_mmi_exec:s0
/(vendor|system/vendor)/bin/qdcmss u:object_r:qdcm-ss_exec:s0
/(vendor|system/vendor)/bin/msm_irqbalance u:object_r:msm_irqbalanced_exec:s0
/(vendor|system/vendor)/bin/imsdatadaemon u:object_r:ims_exec:s0
/(vendor|system/vendor)/bin/imsqmidaemon u:object_r:ims_exec:s0
/(vendor|system/vendor)/bin/ims_rtp_daemon u:object_r:hal_imsrtp_exec:s0
/(vendor|system/vendor)/bin/netmgrd u:object_r:netmgrd_exec:s0
/(vendor|system/vendor)/bin/qmuxd u:object_r:qmuxd_exec:s0
/(vendor|system/vendor)/bin/port-bridge u:object_r:port-bridge_exec:s0
/(vendor|system/vendor)/bin/sensors.qcom u:object_r:sensors_exec:s0
/(vendor|system/vendor)/bin/sensors.qti u:object_r:sensors_exec:s0
/(vendor|system/vendor)/bin/test_diag u:object_r:diag_exec:s0
/(vendor|system/vendor)/bin/thermal-engine u:object_r:thermal-engine_exec:s0
/(vendor|system/vendor)/bin/vm_bms u:object_r:vm_bms_exec:s0
/(vendor|system/vendor)/bin/wfdhdcphalservice u:object_r:wfdhdcphalservice_qti_exec:s0
/(vendor|system/vendor)/bin/mm-qcamera-daemon u:object_r:mm-qcamerad_exec:s0
/(vendor|system/vendor)/bin/qfp-daemon u:object_r:qfp-daemon_exec:s0
/(vendor|system/vendor)/bin/qvop-daemon u:object_r:qvop-daemon_exec:s0
/system/rfs.* u:object_r:rfs_system_file:s0
/(vendor|system/vendor)/bin/time_daemon u:object_r:time_daemon_exec:s0
/(vendor|system/vendor)/bin/rmt_storage u:object_r:rmt_storage_exec:s0
/(vendor|system/vendor)/bin/tftp_server u:object_r:rfs_access_exec:s0
/(vendor|system/vendor)/bin/hvdcp u:object_r:hvdcp_exec:s0
/(vendor|system/vendor)/bin/qseecomd u:object_r:tee_exec:s0
/(vendor|system/vendor)/bin/spdaemon u:object_r:spdaemon_exec:s0
/(vendor|system/vendor)/bin/sec_nvm u:object_r:sec_nvm_exec:s0
/(vendor|system/vendor)/bin/cnss-daemon u:object_r:wcnss_service_exec:s0
/(vendor|system/vendor)/bin/cnss_diag u:object_r:wcnss_service_exec:s0
/(vendor|system/vendor)/bin/hostapd_cli u:object_r:hostapd_exec:s0
/(vendor|system/vendor)/bin/adsprpcd u:object_r:adsprpcd_exec:s0
/(vendor|system/vendor)/bin/cdsprpcd u:object_r:cdsprpcd_exec:s0
/(vendor|system/vendor)/bin/wpa_cli u:object_r:wcnss_service_exec:s0
/(vendor|system/vendor)/bin/mdm_helper u:object_r:mdm_helper_exec:s0
/(vendor|system/vendor)/bin/mdm_helper_proxy u:object_r:mdm_helper_exec:s0
/(vendor|system/vendor)/bin/ks u:object_r:mdm_helper_exec:s0
/(vendor|system/vendor)/bin/pm-service u:object_r:vendor_per_mgr_exec:s0
/(vendor|system/vendor)/bin/pm-proxy u:object_r:vendor_per_mgr_exec:s0
/(vendor|system/vendor)/bin/pd-mapper u:object_r:vendor_pd_mapper_exec:s0
/(vendor|system/vendor)/bin/pd-api-test u:object_r:vendor_pd_mapper_exec:s0
/(vendor|system/vendor)/bin/usb_uicc_client u:object_r:usb_uicc_daemon_exec:s0
/(vendor|system/vendor)/bin/qcom-system-daemon u:object_r:vendor_qcomsysd_exec:s0
/(vendor|system/vendor)/bin/poweroffhandler u:object_r:poweroffhandler_exec:s0
/(vendor|system/vendor)/xbin/qlogd u:object_r:qlogd_exec:s0
/(vendor|system/vendor)/bin/dpmQmiMgr u:object_r:hal_dpmQmiMgr_exec:s0
/(vendor|system/vendor)/bin/ssr_setup u:object_r:vendor_ssr_setup_exec:s0
/(vendor|system/vendor)/bin/subsystem_ramdump u:object_r:vendor_subsystem_ramdump_exec:s0
/(vendor|system/vendor)/bin/ssr_diag u:object_r:vendor_ssr_diag_exec:s0
/(vendor|system/vendor)/bin/hw/qcrild u:object_r:rild_exec:s0
/vendor/bin/hw/android\.hardware\.drm@1\.2-service\.clearkey u:object_r:hal_drm_clearkey_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.drm@1\.2-service\.widevine u:object_r:hal_drm_widevine_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.gnss@.*-service-qti u:object_r:hal_gnss_qti_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.qti\.gnss@.*-service u:object_r:hal_gnss_qti_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.bluetooth@1\.0-service-qti u:object_r:hal_bluetooth_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.display\.color@1\.0-service u:object_r:hal_display_color_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.perf@1\.0-service u:object_r:hal_perf_default_exec:s0
/(vendor|system/vendor)/bin/ssgqmigd u:object_r:ssgqmigd_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.iop@1\.0-service u:object_r:hal_iop_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.iop@2\.0-service u:object_r:hal_iop_default_exec:s0
/vendor/bin/hw/vendor\.qti\.hardware\.mlshal@1\.0-service u:object_r:hal_mirrorlink_qti_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.perf@2\.0-service u:object_r:hal_perf_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.qdutils_disp@1\.0-service-qti u:object_r:hal_qdutils_disp_qti_exec:s0
/(vendor|system/vendor)/bin/sscrpcd u:object_r:sensors_exec:s0
/(vendor|system/vendor)/bin/mlid u:object_r:mlid_exec:s0
/(vendor|system/vendor)/bin/loc_launcher u:object_r:location_exec:s0
/(vendor|system/vendor)/bin/lowi-server u:object_r:location_exec:s0
/(vendor|system/vendor)/bin/xtra-daemon u:object_r:location_exec:s0
/(vendor|system/vendor)/bin/energy-awareness u:object_r:energyawareness_exec:s0
/(vendor|system/vendor)/bin/fidodaemon u:object_r:fidodaemon_exec:s0
/(vendor|system/vendor)/bin/esepmdaemon u:object_r:esepmdaemon_exec:s0
/(vendor|system/vendor)/bin/secotad u:object_r:secotad_exec:s0
/(vendor|system/vendor)/bin/qseeproxydaemon u:object_r:qseeproxy_exec:s0
/(vendor|system/vendor)/bin/dts_configurator u:object_r:dtsconfigurator_exec:s0
/(vendor|system/vendor)/bin/dts_eagle_service u:object_r:dtseagleservice_exec:s0
/(vendor|system/vendor)/bin/qti u:object_r:qti_exec:s0
/(vendor|system/vendor)/bin/adpl u:object_r:adpl_exec:s0
/(vendor|system/vendor)/bin/wcnss_service u:object_r:wcnss_service_exec:s0
/(vendor|system/vendor)/bin/hbtp_daemon u:object_r:hbtp_exec:s0
/(vendor|system/vendor)/bin/touch_fusion u:object_r:touchfusion_exec:s0
/(vendor|system/vendor)/bin/seemp_healthd u:object_r:seemp_health_daemon_exec:s0
/(vendor|system/vendor)/bin/wifidisplayhalservice u:object_r:wifidisplayhalservice_qti_exec:s0
/(vendor|system/vendor)/bin/usf_epos u:object_r:usf_exec:s0
/(vendor|system/vendor)/bin/usf_gesture u:object_r:usf_exec:s0
/(vendor|system/vendor)/bin/usf_hovering u:object_r:usf_exec:s0
/(vendor|system/vendor)/bin/usf_p2p u:object_r:usf_exec:s0
/(vendor|system/vendor)/bin/usf_proximity u:object_r:usf_exec:s0
/(vendor|system/vendor)/bin/usf_sync_gesture u:object_r:usf_exec:s0
/(vendor|system/vendor)/bin/usf_sw_calib u:object_r:usf_exec:s0
/(vendor|system/vendor)/bin/usf_pairing u:object_r:usf_exec:s0
/(vendor|system/vendor)/bin/usf_tester u:object_r:usf_exec:s0
/(vendor|system/vendor)/bin/LKCore u:object_r:qti_logkit_exec:s0
/(vendor|system/vendor)/bin/tbaseLoader u:object_r:tbaseLoader_exec:s0
/(vendor|system/vendor)/bin/mcStarter u:object_r:mcStarter_exec:s0
/(vendor|system/vendor)/bin/fstman u:object_r:fstman_exec:s0
/(vendor|system/vendor)/bin/wigighalsvc u:object_r:wigighalsvc_exec:s0
/(vendor|system/vendor)/bin/wigignpt u:object_r:wigignpt_exec:s0
/(vendor|system/vendor)/bin/mdtpd u:object_r:mdtpdaemon_exec:s0
/(vendor|system/vendor)/bin/wifi_ftmd u:object_r:wifi_ftmd_exec:s0
/(vendor|system/vendor)/bin/fingerprint.qcom u:object_r:fps_hal_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@3\.0-service-qti u:object_r:hal_keymaster_qti_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@4\.0-service-qti u:object_r:hal_keymaster_qti_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@4\.0-strongbox-service-qti u:object_r:hal_keymaster_qti_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.gatekeeper@1\.0-service-qti u:object_r:hal_gatekeeper_qti_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.nfc@1\.2-service\.st u:object_r:hal_nfc_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.confirmationui@1\.0-service-google u:object_r:hal_confirmationui_default_exec:s0
/(vendor|system/vendor)/bin/qdmastatsd u:object_r:qdmastatsd_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.alarm@1\.0-service u:object_r:hal_alarm_qti_default_exec:s0
/(vendor|system/vendor)/bin/imsrcsd u:object_r:hal_rcsservice_exec:s0
/(vendor|system/vendor)/bin/vppservice u:object_r:vendor_vppservice_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.qteeconnector@1\.0-service u:object_r:hal_qteeconnector_qti_exec:s0
/(vendor|system/vendor)/bin/fm_qsoc_patches u:object_r:fm_qsoc_patches_exec:s0
/(vendor|system/vendor)/bin/chre u:object_r:chre_exec:s0
/(vendor|system/vendor)/bin/tloc_daemon u:object_r:tlocd_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.factory@1\.0-service u:object_r:vendor_hal_factory_qti_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.display\.allocator@1\.0-service u:object_r:hal_graphics_allocator_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.display\.allocator-service u:object_r:hal_graphics_allocator_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.tui_comm@1\.0-service-qti u:object_r:hal_tui_comm_qti_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.sensorscalibrate@1\.0-service u:object_r:hal_sensorscalibrate_qti_default_exec:s0
/(vendor|system/vendor)/bin/hw/vendor\.qti\.media\.c2@1\.0-service u:object_r:mediacodec_exec:s0
/(vendor|system/vendor)/bin/power_off_alarm u:object_r:power_off_alarm_exec:s0
# dev socket nodes
/dev/socket/chre u:object_r:chre_socket:s0
/dev/socket/msm_irqbalance u:object_r:irqbalance_socket:s0
/dev/socket/qmux_radio(/.*)? u:object_r:qmuxd_socket:s0
/dev/socket/netmgr(/.*)? u:object_r:netmgrd_socket:s0
/dev/socket/ims_qmid u:object_r:ims_socket:s0
/dev/socket/ims_datad u:object_r:ims_socket:s0
/dev/socket/cnd u:object_r:cnd_socket:s0
###################################
# persist files
#
/persist u:object_r:persist_default_file:s0
/persist u:object_r:persist_file:s0
/mnt/vendor/persist(/.*)? u:object_r:persist_file:s0
/mnt/vendor/persist/camera(/.*)? u:object_r:persist_camera_file:s0
/mnt/vendor/persist/bluetooth(/.*)? u:object_r:persist_bluetooth_file:s0
/mnt/vendor/persist/drm(/.*)? u:object_r:persist_drm_file:s0
/mnt/vendor/persist/sensors(/.*)? u:object_r:sensors_persist_file:s0
/mnt/vendor/persist/alarm(/.*)? u:object_r:persist_alarm_file:s0
/mnt/vendor/persist/time(/.*)? u:object_r:persist_time_file:s0
/mnt/vendor/persist/data(/.*)? u:object_r:persist_drm_file:s0
/mnt/vendor/persist/data/tz(/.*)? u:object_r:persist_drm_file:s0
/mnt/vendor/persist/data/sfs(/.*)? u:object_r:persist_drm_file:s0
/mnt/vendor/persist/qti_fp(/.*)? u:object_r:persist_qti_fp_file:s0
/mnt/vendor/persist/usf(/.*)? u:object_r:persist_usf_file:s0
/mnt/vendor/persist/hlos_rfs(/.*)? u:object_r:persist_rfs_shared_hlos_file:s0
/mnt/vendor/persist/display(/.*)? u:object_r:persist_display_file:s0
/mnt/vendor/persist/rfs.* u:object_r:persist_rfs_file:s0
/mnt/vendor/persist/speccfg(/.*)? u:object_r:regionalization_file:s0
/mnt/vendor/persist/misc(/.*)? u:object_r:persist_misc_file:s0
/mnt/vendor/persist/bms(/.*)? u:object_r:persist_bms_file:s0
/mnt/vendor/persist/vpp(/.*)? u:object_r:persist_vpp_file:s0
/mnt/vendor/persist/secnvm(/.*)? u:object_r:persist_secnvm_file:s0
/mnt/vendor/persist/FTM_AP(/.*)? u:object_r:vendor_persist_mmi_file:s0
/mnt/vendor/persist/hvdcp_opti(/.*)? u:object_r:persist_hvdcp_file:s0
/mnt/vendor/persist/audio(/.*)? u:object_r:persist_audio_file:s0
###################################
# etc files
#
/vendor/etc/hbtp/* u:object_r:hbtp_cfg_file:s0
###################################
# adsp files
#
/(vendor|system/vendor)/dsp(/.*)? u:object_r:adsprpcd_file:s0
/dsp(/.*)? u:object_r:adsprpcd_file:s0
###################################
# cache files
#
###################################
# vendor files
#
/vendor/package(/.*)? u:object_r:vendor_carrier_file:s0
/vendor/package(/.*)?/overlay(/.*)? u:object_r:vendor_overlay_file:s0
/vendor/package(/.*)?/app(/.*)? u:object_r:vendor_app_file:s0
# same-process HAL files and their dependencies
#
/vendor/lib(64)?/hw/android\.hardware\.graphics\.mapper@2\.0-impl-qti-display\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/vendor\.qti\.hardware\.display\.mapper@1\.0\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/vendor\.qti\.hardware\.display\.mapper@2\.0\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/vendor\.qti\.hardware\.display\.mapperextensions@1\.0\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/hw/android\.hardware\.graphics\.mapper@3\.0-impl-qti-display\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/vendor\.qti\.hardware\.display\.mapper@3\.0\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libqdMetaData\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/lib_aion_buffer\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libqservice\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libqdutils\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libadreno_utils\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libgsl\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libEGL_adreno\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libGLESv1_CM_adreno\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libGLESv2_adreno\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libdrmutils\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libdrm\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libavenhancements\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libgrallocutils\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libgralloccore\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libExtendedExtractor.so u:object_r:same_process_hal_file:s0
# RenderScript dependencies.
# To test: run cts -m CtsRenderscriptTestCases
/vendor/lib(64)?/libRSDriver_adreno\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libCB\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libllvm-qgl\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libbccQTI\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libllvm-qcom\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/librs_adreno\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/librs_adreno_sha1\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libqti-perfd-client\.so u:object_r:same_process_hal_file:s0
# perf-hal client lib (included by libqti-perfd-client.so)
/vendor/lib(64)?/vendor\.qti\.hardware\.perf@1\.0\.so u:object_r:same_process_hal_file:s0
# libGLESv2_adreno depends on this
/vendor/lib(64)?/libllvm-glnext\.so u:object_r:same_process_hal_file:s0
# libOpenCL-pixel and its dependencies
/vendor/lib(64)?/libOpenCL-pixel\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libOpenCL\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libq3dtools_adreno\.so u:object_r:same_process_hal_file:s0
# hbtp dependencies
/vendor/lib(64)?/libhbtpitsjni\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libhbtpdbgclientjni\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libhbtpjni\.so u:object_r:same_process_hal_file:s0
#Loaded by native loader (zygote) for all processes
/vendor/lib(64)?/libhalide_hexagon_host\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libadsprpc\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libcdsprpc\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libsdsprpc\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libdiag\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libtime_genoff\.so u:object_r:same_process_hal_file:s0
# libmmi_jni
/vendor/lib(64)?/libmmi_jni\.so u:object_r:same_process_hal_file:s0
# Fastcv libs
/vendor/lib(64)?/libfastcvdsp_stub\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libfastcvadsp_stub\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libfastcvopt\.so u:object_r:same_process_hal_file:s0
# SVA files
/vendor/lib(64)?/liblistenjni\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/liblistensoundmodel2\.so u:object_r:same_process_hal_file:s0
###################################
# firmware images
#
/vendor/firmware(/.*)? u:object_r:vendor_firmware_file:s0
/vendor/bt_firmware(/.*)? u:object_r:bt_firmware_file:s0
/vendor/firmware_mnt(/.*)? u:object_r:firmware_file:s0
/(vendor|system/vendor)/bin/grep u:object_r:vendor_toolbox_exec:s0
##################################
#vendor toolbox
#
/(vendor|system/vendor)/bin/toolbox_vendor u:object_r:vendor_toolbox_exec:s0
/dev/st21nfc u:object_r:nfc_device:s0
/data/nfc(/.*)? u:object_r:nfc_data_file:s0
#Android NN Driver
/(vendor|system/vendor)/bin/hw/android\.hardware\.neuralnetworks@1\.2-service-qti u:object_r:hal_neuralnetworks_default_exec:s0
# dev nodes
/dev/ipa u:object_r:ipa_dev:s0
/dev/wwan_ioctl u:object_r:ipa_dev:s0
/dev/ipaNatTable u:object_r:ipa_dev:s0
/dev/sg[0-9]+ u:object_r:sg_device:s0
/dev/qseecom u:object_r:tee_device:s0
/dev/video([0-9])+ u:object_r:video_device:s0
/dev/media([0-9])+ u:object_r:video_device:s0
/dev/v4l-subdev.* u:object_r:video_device:s0
/dev/jpeg[0-9]* u:object_r:video_device:s0
/dev/dri/card0 u:object_r:graphics_device:s0
/dev/adsprpc-smd u:object_r:qdsp_device:s0
/dev/adsprpc-smd-secure u:object_r:qdsp_device:s0
/dev/kgsl-3d0 u:object_r:gpu_device:s0
/dev/wlan u:object_r:wlan_device:s0
/dev/cpu_dma_latency u:object_r:latency_device:s0
/dev/smem_log u:object_r:smem_log_device:s0
/dev/subsys_modem u:object_r:modem_ssr_device:s0
/dev/diag u:object_r:diag_device:s0
/dev/sp_kernel u:object_r:skp_device:s0
/dev/qsee_ipc_irq_spss u:object_r:qsee_ipc_irq_spss_device:s0
/dev/spcom u:object_r:spcom_device:s0
/dev/sp_ssr u:object_r:sp_ssr_device:s0
/dev/sp_keymaster u:object_r:sp_keymaster_device:s0
/dev/btpower u:object_r:hci_attach_dev:s0
/dev/ttyHS0 u:object_r:hci_attach_dev:s0
/dev/ttyMSM0 u:object_r:tty_device:s0
/dev/block/sda u:object_r:gpt_block_device:s0
/dev/block/sd[bc]1? u:object_r:xbl_block_device:s0
/dev/block/sde u:object_r:boot_block_device:s0
/dev/msm_.* u:object_r:audio_device:s0
/dev/ramdump_.* u:object_r:ramdump_device:s0
/dev/at_.* u:object_r:at_device:s0
# dev socket nodes
/dev/socket/ipacm_log_file u:object_r:ipacm_socket:s0
/dev/socket/location(/.*)? u:object_r:location_socket:s0
/dev/socket/wifihal(/.*)? u:object_r:wifihal_socket:s0
/dev/socket/pps u:object_r:pps_socket:s0
# files in /vendor
/vendor/bin/ipacm u:object_r:hal_tetheroffload_default_exec:s0
/vendor/bin/ipacm-diag u:object_r:hal_tetheroffload_default_exec:s0
# data files
/data/vendor/ipa(/.*)? u:object_r:ipa_vendor_data_file:s0
/data/vendor/sensors(/.*)? u:object_r:sensors_vendor_data_file:s0
/data/vendor/rfs/mpss(/.*)? u:object_r:mpss_rfs_data_file:s0
/data/vendor/radio(/.*)? u:object_r:vendor_radio_data_file:s0
/data/vendor/netmgr(/.*)? u:object_r:netmgrd_data_file:s0
/data/vendor/modem_fdr(/.*)? u:object_r:modem_fdr_file:s0
/data/vendor/mediadrm(/.*)? u:object_r:mediadrm_vendor_data_file:s0
/data/vendor/ramdump(/.*)? u:object_r:ramdump_vendor_data_file:s0
/data/vendor/ssrdump(/.*)? u:object_r:ramdump_vendor_data_file:s0
/data/vendor/ssrlog(/.*)? u:object_r:ssr_log_file:s0
/data/vendor/camera(/.*)? u:object_r:camera_vendor_data_file:s0
/data/vendor/location(/.*)? u:object_r:location_data_file:s0
/data/vendor/tombstones/rfs(/.*)? u:object_r:rfs_tombstone_data_file:s0
/data/vendor/audio(/.*)? u:object_r:audio_vendor_data_file:s0
/data/vendor/display(/.*)? u:object_r:display_vendor_data_file:s0
/data/vendor/time(/.*)? u:object_r:time_data_file:s0
# spdaemon and sec_nvm files
/dev/spdaemon_ssr u:object_r:spdaemon_ssr_device:s0
/dev/sec_nvm_.* u:object_r:sec_nvm_device:s0
# cnss_diag files
/data/vendor/wifi/cnss_diag(/.*)? u:object_r:cnss_vendor_data_file:s0
/data/vendor/connectivity(/.*)? u:object_r:cnd_data_file:s0

2
vendor/qcom/common/fm.te vendored Normal file
View File

@@ -0,0 +1,2 @@
type fm_qsoc_patches, domain;
type fm_qsoc_patches_exec, exec_type, vendor_file_type, file_type;

3
vendor/qcom/common/fps_hal.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type fps_hal, domain;
type fps_hal_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(fps_hal)

3
vendor/qcom/common/fstman.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type fstman, domain;
type fstman_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(fstman)

3
vendor/qcom/common/gamed.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type gamed, domain;
type gamed_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(gamed)

29
vendor/qcom/common/genfs_contexts vendored Normal file
View File

@@ -0,0 +1,29 @@
genfscon sysfs /kernel/wlan u:object_r:sysfs_msm_wlan:s0
genfscon sysfs /kernel/boot_adsp/boot u:object_r:sysfs_msm_boot:s0
genfscon sysfs /kernel/boot_cdsp/boot u:object_r:sysfs_msm_boot:s0
genfscon sysfs /kernel/boot_slpi/boot u:object_r:sysfs_msm_boot:s0
genfscon sysfs /class/uio u:object_r:sysfs_uio:s0
genfscon sysfs /devices/virtual/kgsl/kgsl/proc u:object_r:sysfs_kgsl_proc:s0
genfscon sysfs /devices/platform/soc/0.qcom,rmtfs_sharedmem u:object_r:sysfs_rmtfs:s0
genfscon sysfs /devices/platform/soc/soc:qcom,kgsl-hyp u:object_r:sysfs_msm_subsys:s0
genfscon sysfs /devices/platform/soc/soc:qcom,spss_utils u:object_r:sysfs_spss:s0
genfscon sysfs /devices/platform/soc/soc:qcom,faceauth_fws u:object_r:sysfs_faceauth:s0
genfscon sysfs /devices/platform/soc/soc:qcom,faceauth_fws_b u:object_r:sysfs_faceauth:s0
genfscon sysfs /bus/esoc u:object_r:sysfs_esoc:s0
genfscon sysfs /bus/msm_subsys u:object_r:sysfs_msm_subsys:s0
genfscon debugfs /wlan u:object_r:debugfs_wlan:s0
genfscon debugfs /wlan0 u:object_r:debugfs_wlan:s0
genfscon debugfs /icnss u:object_r:debugfs_icnss:s0
genfscon debugfs /ipc_logging u:object_r:debugfs_ipc:s0
genfscon debugfs /ion u:object_r:debugfs_ion:s0
genfscon debugfs /tzdbg u:object_r:debugfs_tzdbg:s0
genfscon sysfs /module/diagchar u:object_r:sysfs_diag:s0
genfscon proc /debugdriver/driverdump u:object_r:proc_wifi_dbg:s0
genfscon proc /ath_pktlog/cld u:object_r:proc_wifi_dbg:s0
genfscon sysfs /devices/platform/soc/a88000.i2c/i2c-0/0-000c/a88000.i2c:qcom,smb1355@c:qcom,smb1355-charger@1000/power_supply u:object_r:sysfs_batteryinfo:s0
genfscon sysfs /devices/platform/soc/ae00000.qcom,mdss_rotator u:object_r:sysfs_msm_subsys:s0
genfscon sysfs /devices/platform/soc/18800000.qcom,icnss/net u:object_r:sysfs_net:s0
genfscon sysfs /module/diagchar/parameters/timestamp_switch u:object_r:sysfs_timestamp_switch:s0
genfscon sysfs /devices/platform/soc/soc:qcom,ipa_fws@1e08000 u:object_r:sysfs_data:s0
genfscon sysfs /devices/virtual/xt_hardidletimer/timers u:object_r:sysfs_data:s0
genfscon sysfs /devices/virtual/xt_idletimer/timers u:object_r:sysfs_data:s0

3
vendor/qcom/common/hal_alarm_qti_default.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type hal_alarm_qti_default, domain;
type hal_alarm_qti_default_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_alarm_qti_default)

3
vendor/qcom/common/hal_bluetooth_qti.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type hal_bluetooth_qti, domain;
type hal_bluetooth_qti_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_bluetooth_qti)

3
vendor/qcom/common/hal_display_color.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type hal_display_color_default, domain;
type hal_display_color_default_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_display_color_default)

3
vendor/qcom/common/hal_dpmQmiMgr.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type hal_dpmQmiMgr, domain;
type hal_dpmQmiMgr_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_dpmQmiMgr)

3
vendor/qcom/common/hal_drm_clearkey.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type hal_drm_clearkey, domain;
type hal_drm_clearkey_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_drm_clearkey)

3
vendor/qcom/common/hal_drm_widevine.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type hal_drm_widevine, domain;
type hal_drm_widevine_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_drm_widevine)

3
vendor/qcom/common/hal_factory_qti_default.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type vendor_hal_factory_qti_default, domain;
type vendor_hal_factory_qti_default_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(vendor_hal_factory_qti_default)

3
vendor/qcom/common/hal_gatekeeper_qti.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type hal_gatekeeper_qti, domain;
type hal_gatekeeper_qti_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_gatekeeper_qti)

3
vendor/qcom/common/hal_gnss_qti.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type hal_gnss_qti, domain;
type hal_gnss_qti_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_gnss_qti)

3
vendor/qcom/common/hal_imsrtp.te vendored Normal file
View File

@@ -0,0 +1,3 @@
type hal_imsrtp, domain;
type hal_imsrtp_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_imsrtp)

Some files were not shown because too many files have changed in this diff Show More