From 010f16432b2b8f1c1a7a4a79976127dc2a8c7d57 Mon Sep 17 00:00:00 2001 From: CuriousNom Date: Thu, 17 Jul 2025 12:00:00 +0000 Subject: [PATCH] pipa: sepolicy: Set data_file_type for xiaomi_keyboard_conf_file under /data/vendor Label xiaomi_keyboard_conf_file with data_file_type and place it under /data/vendor to comply with SELinux policy requirements. This avoids the use of core_data_file_type, which is restricted to core domains, and ensures compatibility with sepolicy_test and neverallow rules. Test: sepolicy_test and neverallow checks pass --- sepolicy/vendor/file_contexts | 2 +- sepolicy/vendor/xiaomi_keyboard.te | 4 +++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/sepolicy/vendor/file_contexts b/sepolicy/vendor/file_contexts index 59087fa..29a65d1 100644 --- a/sepolicy/vendor/file_contexts +++ b/sepolicy/vendor/file_contexts @@ -10,4 +10,4 @@ # Xiaomi Keyboard /dev/nanodev0 u:object_r:xiaomi_keyboard_device:s0 -/data/misc/xiaomi_keyboard.conf u:object_r:xiaomi_keyboard_conf_file:s0 \ No newline at end of file +/data/vendor/xiaomi_keyboard.conf u:object_r:xiaomi_keyboard_conf_file:s0 diff --git a/sepolicy/vendor/xiaomi_keyboard.te b/sepolicy/vendor/xiaomi_keyboard.te index a5a56ce..e592c8e 100644 --- a/sepolicy/vendor/xiaomi_keyboard.te +++ b/sepolicy/vendor/xiaomi_keyboard.te @@ -23,4 +23,6 @@ allow xiaomi_keyboard servicemanager:binder { call transfer }; allow xiaomi_keyboard sysfs:dir { read open }; allow xiaomi_keyboard sysfs_devices_system_cpu:file { read open }; -allow xiaomi_keyboard xiaomi_keyboard_conf_file:file { read open }; \ No newline at end of file +allow xiaomi_keyboard xiaomi_keyboard_conf_file:file { read open }; + +typeattribute xiaomi_keyboard_conf_file data_file_type;