pipa: Add xiaomi pen sepolicy

Change-Id: Ic1b91a264f67c67a2e6126cd08ddcbc766b894f0
This commit is contained in:
Davide Garberi
2023-10-30 02:06:06 +01:00
committed by Abdulwahab Isam
parent c957c83ab9
commit 088ae5d7e4
8 changed files with 22 additions and 0 deletions

View File

@@ -23,6 +23,9 @@ TARGET_KERNEL_CONFIG += vendor/xiaomi/pipa.config
# Properties
TARGET_VENDOR_PROP += $(DEVICE_PATH)/vendor.prop
# Sepolicy
BOARD_VENDOR_SEPOLICY_DIRS += $(DEVICE_PATH)/sepolicy/vendor
# Wi-Fi
SOONG_CONFIG_XIAOMI_KONA_WIFI_SYMLINK_VERSION := v2

2
sepolicy/vendor/device.te vendored Normal file
View File

@@ -0,0 +1,2 @@
# Xiaomi Touch
type xiaomi_touch_device, dev_type;

5
sepolicy/vendor/file_contexts vendored Normal file
View File

@@ -0,0 +1,5 @@
# Pen
/vendor/bin/xiaomi-pen u:object_r:xiaomi_pen_exec:s0
# Xiaomi Touch
/dev/xiaomi-touch u:object_r:xiaomi_touch_device:s0

1
sepolicy/vendor/property.te vendored Normal file
View File

@@ -0,0 +1 @@
system_public_prop(vendor_pen_prop);

1
sepolicy/vendor/property_contexts vendored Normal file
View File

@@ -0,0 +1 @@
persist.vendor.parts.pen u:object_r:vendor_pen_prop:s0

1
sepolicy/vendor/system_app.te vendored Normal file
View File

@@ -0,0 +1 @@
set_prop(system_app, vendor_pen_prop)

1
sepolicy/vendor/vendor_init.te vendored Normal file
View File

@@ -0,0 +1 @@
get_prop(vendor_init, vendor_pen_prop)

8
sepolicy/vendor/xiaomi_pen.te vendored Normal file
View File

@@ -0,0 +1,8 @@
# Pen
type xiaomi_pen, domain;
type xiaomi_pen_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(xiaomi_pen)
allow xiaomi_pen xiaomi_touch_device:chr_file { ioctl open read write };