Add 'sepolicy/' from tag 'android-15.0.0_r2'

git-subtree-dir: sepolicy
git-subtree-mainline: 6f455bcfcb
git-subtree-split: aeecf28568
Change-Id: Ib98ae86bf12bc33ef2fb4c4976fabc80dd90010b
This commit is contained in:
Michael Bestas 2024-10-27 13:55:04 +02:00
commit 0c0a9ffaec
No known key found for this signature in database
36 changed files with 256 additions and 0 deletions

3
sepolicy/OWNERS Normal file
View file

@ -0,0 +1,3 @@
include platform/system/sepolicy:/OWNERS
rurumihong@google.com

View file

@ -0,0 +1,2 @@
# sepolicy that are shared among devices using ZumaPro
BOARD_SEPOLICY_DIRS += device/google/caimito-sepolicy/caiman

View file

@ -0,0 +1,2 @@
This folder holds sepolicy exclusively for one device. For example, genfs_contexts
paths that are affected by device tree.

View file

@ -0,0 +1,16 @@
# Devices
/dev/lwis-act-cornerfolk u:object_r:lwis_device:s0
/dev/lwis-act-cornerfolk-taotie-front u:object_r:lwis_device:s0
/dev/lwis-act-cornerfolk-taotie-uw u:object_r:lwis_device:s0
/dev/lwis-eeprom-djinn u:object_r:lwis_device:s0
/dev/lwis-eeprom-humbaba u:object_r:lwis_device:s0
/dev/lwis-eeprom-smaug-taotie-front u:object_r:lwis_device:s0
/dev/lwis-eeprom-smaug-taotie-uw u:object_r:lwis_device:s0
/dev/lwis-flash-lm3644 u:object_r:lwis_device:s0
/dev/lwis-ois-djinn u:object_r:lwis_device:s0
/dev/lwis-ois-humbaba u:object_r:lwis_device:s0
/dev/lwis-sensor-boitata u:object_r:lwis_device:s0
/dev/lwis-sensor-taotie-front u:object_r:lwis_device:s0
/dev/lwis-sensor-taotie-tele u:object_r:lwis_device:s0
/dev/lwis-sensor-taotie-uw u:object_r:lwis_device:s0
/dev/lwis-tof-tarasque u:object_r:lwis_device:s0

View file

@ -0,0 +1,8 @@
# WLC
genfscon sysfs /devices/platform/10ca0000.hsi2c/i2c-10/10-003b u:object_r:sysfs_wlc:s0
#Wakeup node
genfscon sysfs /devices/platform/odm/odm:qcom,qbt-handler/power/wakeup u:object_r:sysfs_wakeup:s0
genfscon sysfs /devices/platform/110f0000.drmdp/wakeup u:object_r:sysfs_wakeup:s0
genfscon sysfs /devices/platform/111d0000.spi/spi_master/spi20/spi20.0/synaptics_tcm.0/power/wakeup u:object_r:sysfs_wakeup:s0
genfscon sysfs /devices/platform/111d0000.spi/spi_master/spi20/spi20.0/synaptics_tcm.0/wakeup u:object_r:sysfs_wakeup:s0

View file

@ -0,0 +1,7 @@
allow grilservice_app hal_radio_ext_service:service_manager find;
binder_call(grilservice_app, hal_radio_ext)
binder_use(grilservice_app)
allow grilservice_app gril_antenna_tuning_service:service_manager find;
binder_call(grilservice_app, gril_antenna_tuning_service)
binder_call(grilservice_app, twoshay)

View file

@ -0,0 +1,2 @@
# TODO (b/306087355) Remove this and make it specific to the app
hal_client_domain(system_app, hal_fingerprint)

View file

@ -0,0 +1,7 @@
# Display
set_prop(vendor_init, vendor_display_prop)
# Vendor Ims Service property - Set the audio path for PDK build
userdebug_or_eng(`
set_prop(vendor_init, vendor_imssvc_prop)
')

View file

@ -0,0 +1,2 @@
# sepolicy that are shared among devices using ZumaPro
BOARD_SEPOLICY_DIRS += device/google/caimito-sepolicy/komodo

View file

@ -0,0 +1,2 @@
This folder holds sepolicy exclusively for one device. For example, genfs_contexts
paths that are affected by device tree.

View file

@ -0,0 +1,16 @@
# Devices
/dev/lwis-act-cornerfolk u:object_r:lwis_device:s0
/dev/lwis-act-cornerfolk-taotie-front u:object_r:lwis_device:s0
/dev/lwis-act-cornerfolk-taotie-uw u:object_r:lwis_device:s0
/dev/lwis-eeprom-djinn u:object_r:lwis_device:s0
/dev/lwis-eeprom-humbaba u:object_r:lwis_device:s0
/dev/lwis-eeprom-smaug-taotie-front u:object_r:lwis_device:s0
/dev/lwis-eeprom-smaug-taotie-uw u:object_r:lwis_device:s0
/dev/lwis-flash-lm3644 u:object_r:lwis_device:s0
/dev/lwis-ois-djinn u:object_r:lwis_device:s0
/dev/lwis-ois-humbaba u:object_r:lwis_device:s0
/dev/lwis-sensor-boitata u:object_r:lwis_device:s0
/dev/lwis-sensor-taotie-front u:object_r:lwis_device:s0
/dev/lwis-sensor-taotie-tele u:object_r:lwis_device:s0
/dev/lwis-sensor-taotie-uw u:object_r:lwis_device:s0
/dev/lwis-tof-tarasque u:object_r:lwis_device:s0

View file

@ -0,0 +1,8 @@
# WLC
genfscon sysfs /devices/platform/10ca0000.hsi2c/i2c-10/10-003b u:object_r:sysfs_wlc:s0
#Wakeup node
genfscon sysfs /devices/platform/odm/odm:qcom,qbt-handler/power/wakeup u:object_r:sysfs_wakeup:s0
genfscon sysfs /devices/platform/110f0000.drmdp/wakeup u:object_r:sysfs_wakeup:s0
genfscon sysfs /devices/platform/111d0000.spi/spi_master/spi20/spi20.0/synaptics_tcm.0/power/wakeup u:object_r:sysfs_wakeup:s0
genfscon sysfs /devices/platform/111d0000.spi/spi_master/spi20/spi20.0/synaptics_tcm.0/wakeup u:object_r:sysfs_wakeup:s0

View file

@ -0,0 +1,7 @@
allow grilservice_app hal_radio_ext_service:service_manager find;
binder_call(grilservice_app, hal_radio_ext)
binder_use(grilservice_app)
allow grilservice_app gril_antenna_tuning_service:service_manager find;
binder_call(grilservice_app, gril_antenna_tuning_service)
binder_call(grilservice_app, twoshay)

View file

@ -0,0 +1,2 @@
# TODO (b/306087355) Remove this and make it specific to the app
hal_client_domain(system_app, hal_fingerprint)

View file

@ -0,0 +1,4 @@
# Vendor Ims Service property - Set the audio path for PDK build
userdebug_or_eng(`
set_prop(vendor_init, vendor_imssvc_prop)
')

View file

@ -0,0 +1,2 @@
# sepolicy that are shared among devices using ZumaPro
BOARD_SEPOLICY_DIRS += device/google/caimito-sepolicy/ripcurrent24

View file

@ -0,0 +1,2 @@
This folder holds sepolicy exclusively for one device. For example, genfs_contexts
paths that are affected by device tree.

View file

@ -0,0 +1,44 @@
# Devices
/dev/lwis-act-cornerfolk u:object_r:lwis_device:s0
/dev/lwis-act-cornerfolk-dokkaebi u:object_r:lwis_device:s0
/dev/lwis-act-cornerfolk-nautilus u:object_r:lwis_device:s0
/dev/lwis-act-cornerfolk-oksoko u:object_r:lwis_device:s0
/dev/lwis-act-cornerfolk-oksoko-nautilus u:object_r:lwis_device:s0
/dev/lwis-act-cornerfolk-sandworm u:object_r:lwis_device:s0
/dev/lwis-act-cornerfolk-taotie-front u:object_r:lwis_device:s0
/dev/lwis-act-cornerfolk-taotie-uw u:object_r:lwis_device:s0
/dev/lwis-act-jotnar u:object_r:lwis_device:s0
/dev/lwis-act-slenderman u:object_r:lwis_device:s0
/dev/lwis-act-slenderman-sandworm u:object_r:lwis_device:s0
/dev/lwis-eeprom-djinn u:object_r:lwis_device:s0
/dev/lwis-eeprom-djinn-nautilus u:object_r:lwis_device:s0
/dev/lwis-eeprom-gargoyle u:object_r:lwis_device:s0
/dev/lwis-eeprom-humbaba u:object_r:lwis_device:s0
/dev/lwis-eeprom-humbaba-taotie u:object_r:lwis_device:s0
/dev/lwis-eeprom-jotnar u:object_r:lwis_device:s0
/dev/lwis-eeprom-smaug-dokkaebi u:object_r:lwis_device:s0
/dev/lwis-eeprom-smaug-oksoko u:object_r:lwis_device:s0
/dev/lwis-eeprom-smaug-oksoko-nautilus u:object_r:lwis_device:s0
/dev/lwis-eeprom-smaug-sandworm u:object_r:lwis_device:s0
/dev/lwis-eeprom-smaug-taotie-front u:object_r:lwis_device:s0
/dev/lwis-eeprom-smaug-taotie-uw u:object_r:lwis_device:s0
/dev/lwis-flash-lm3644 u:object_r:lwis_device:s0
/dev/lwis-ois-djinn u:object_r:lwis_device:s0
/dev/lwis-ois-djinn-nautilus u:object_r:lwis_device:s0
/dev/lwis-ois-gargoyle u:object_r:lwis_device:s0
/dev/lwis-ois-humbaba u:object_r:lwis_device:s0
/dev/lwis-ois-humbaba-taotie u:object_r:lwis_device:s0
/dev/lwis-ois-jotnar u:object_r:lwis_device:s0
/dev/lwis-sensor-boitata u:object_r:lwis_device:s0
/dev/lwis-sensor-boitata-nautilus u:object_r:lwis_device:s0
/dev/lwis-sensor-dokkaebi u:object_r:lwis_device:s0
/dev/lwis-sensor-dokkaebi-nautilus u:object_r:lwis_device:s0
/dev/lwis-sensor-kraken u:object_r:lwis_device:s0
/dev/lwis-sensor-nagual u:object_r:lwis_device:s0
/dev/lwis-sensor-oksoko u:object_r:lwis_device:s0
/dev/lwis-sensor-oksoko-nautilus u:object_r:lwis_device:s0
/dev/lwis-sensor-sandworm u:object_r:lwis_device:s0
/dev/lwis-sensor-taotie-front u:object_r:lwis_device:s0
/dev/lwis-sensor-taotie-tele u:object_r:lwis_device:s0
/dev/lwis-sensor-taotie-uw u:object_r:lwis_device:s0
/dev/lwis-tof-tarasque u:object_r:lwis_device:s0

View file

@ -0,0 +1,11 @@
# Haptics
genfscon sysfs /devices/platform/10c80000.hsi2c/i2c-6/6-0042 u:object_r:sysfs_vibrator:s0
genfscon sysfs /devices/platform/10c80000.hsi2c/i2c-5/5-0042 u:object_r:sysfs_vibrator:s0
genfscon sysfs /devices/platform/10c80000.hsi2c/i2c-4/4-0042 u:object_r:sysfs_vibrator:s0
genfscon sysfs /devices/platform/10c80000.hsi2c/i2c-6/6-0043 u:object_r:sysfs_vibrator:s0
genfscon sysfs /devices/platform/10c80000.hsi2c/i2c-5/5-0043 u:object_r:sysfs_vibrator:s0
genfscon sysfs /devices/platform/10c80000.hsi2c/i2c-4/4-0043 u:object_r:sysfs_vibrator:s0
# WLC
genfscon sysfs /devices/platform/10c90000.hsi2c/i2c-9/9-003b u:object_r:sysfs_wlc:s0
genfscon sysfs /devices/platform/10c90000.hsi2c/i2c-9/9-0061 u:object_r:sysfs_wlc:s0

View file

@ -0,0 +1,2 @@
# TODO (b/306087355) Remove this and make it specific to the app
hal_client_domain(system_app, hal_fingerprint)

View file

@ -0,0 +1,4 @@
# Vendor Ims Service property - Set the audio path for PDK build
userdebug_or_eng(`
set_prop(vendor_init, vendor_imssvc_prop)
')

View file

@ -0,0 +1,3 @@
# sepolicy that are shared among devices using ZumaPro
BOARD_SEPOLICY_DIRS += device/google/caimito-sepolicy/ripcurrentpro

View file

@ -0,0 +1,2 @@
This folder holds sepolicy exclusively for one device. For example, genfs_contexts
paths that are affected by device tree.

View file

@ -0,0 +1,44 @@
# Devices
/dev/lwis-act-cornerfolk u:object_r:lwis_device:s0
/dev/lwis-act-cornerfolk-dokkaebi u:object_r:lwis_device:s0
/dev/lwis-act-cornerfolk-nautilus u:object_r:lwis_device:s0
/dev/lwis-act-cornerfolk-oksoko u:object_r:lwis_device:s0
/dev/lwis-act-cornerfolk-oksoko-nautilus u:object_r:lwis_device:s0
/dev/lwis-act-cornerfolk-sandworm u:object_r:lwis_device:s0
/dev/lwis-act-cornerfolk-taotie-front u:object_r:lwis_device:s0
/dev/lwis-act-cornerfolk-taotie-uw u:object_r:lwis_device:s0
/dev/lwis-act-jotnar u:object_r:lwis_device:s0
/dev/lwis-act-slenderman u:object_r:lwis_device:s0
/dev/lwis-act-slenderman-sandworm u:object_r:lwis_device:s0
/dev/lwis-eeprom-djinn u:object_r:lwis_device:s0
/dev/lwis-eeprom-djinn-nautilus u:object_r:lwis_device:s0
/dev/lwis-eeprom-gargoyle u:object_r:lwis_device:s0
/dev/lwis-eeprom-humbaba u:object_r:lwis_device:s0
/dev/lwis-eeprom-humbaba-taotie u:object_r:lwis_device:s0
/dev/lwis-eeprom-jotnar u:object_r:lwis_device:s0
/dev/lwis-eeprom-smaug-dokkaebi u:object_r:lwis_device:s0
/dev/lwis-eeprom-smaug-oksoko u:object_r:lwis_device:s0
/dev/lwis-eeprom-smaug-oksoko-nautilus u:object_r:lwis_device:s0
/dev/lwis-eeprom-smaug-sandworm u:object_r:lwis_device:s0
/dev/lwis-eeprom-smaug-taotie-front u:object_r:lwis_device:s0
/dev/lwis-eeprom-smaug-taotie-uw u:object_r:lwis_device:s0
/dev/lwis-flash-lm3644 u:object_r:lwis_device:s0
/dev/lwis-ois-djinn u:object_r:lwis_device:s0
/dev/lwis-ois-djinn-nautilus u:object_r:lwis_device:s0
/dev/lwis-ois-gargoyle u:object_r:lwis_device:s0
/dev/lwis-ois-humbaba u:object_r:lwis_device:s0
/dev/lwis-ois-humbaba-taotie u:object_r:lwis_device:s0
/dev/lwis-ois-jotnar u:object_r:lwis_device:s0
/dev/lwis-sensor-boitata u:object_r:lwis_device:s0
/dev/lwis-sensor-boitata-nautilus u:object_r:lwis_device:s0
/dev/lwis-sensor-dokkaebi u:object_r:lwis_device:s0
/dev/lwis-sensor-dokkaebi-nautilus u:object_r:lwis_device:s0
/dev/lwis-sensor-kraken u:object_r:lwis_device:s0
/dev/lwis-sensor-nagual u:object_r:lwis_device:s0
/dev/lwis-sensor-oksoko u:object_r:lwis_device:s0
/dev/lwis-sensor-oksoko-nautilus u:object_r:lwis_device:s0
/dev/lwis-sensor-sandworm u:object_r:lwis_device:s0
/dev/lwis-sensor-taotie-front u:object_r:lwis_device:s0
/dev/lwis-sensor-taotie-tele u:object_r:lwis_device:s0
/dev/lwis-sensor-taotie-uw u:object_r:lwis_device:s0
/dev/lwis-tof-tarasque u:object_r:lwis_device:s0

View file

@ -0,0 +1,7 @@
# Haptics
genfscon sysfs /devices/platform/10c80000.hsi2c/i2c-0/0-0043 u:object_r:sysfs_vibrator:s0
genfscon sysfs /devices/platform/10c80000.hsi2c/i2c-0/0-0042 u:object_r:sysfs_vibrator:s0
# WLC
genfscon sysfs /devices/platform/10c90000.hsi2c/i2c-9/9-003b u:object_r:sysfs_wlc:s0
genfscon sysfs /devices/platform/10c90000.hsi2c/i2c-9/9-0061 u:object_r:sysfs_wlc:s0

View file

@ -0,0 +1,2 @@
# TODO (b/306087355) Remove this and make it specific to the app
hal_client_domain(system_app, hal_fingerprint)

View file

@ -0,0 +1,4 @@
# Vendor Ims Service property - Set the audio path for PDK build
userdebug_or_eng(`
set_prop(vendor_init, vendor_imssvc_prop)
')

View file

@ -0,0 +1,2 @@
# sepolicy that are shared among devices using ZumaPro
BOARD_SEPOLICY_DIRS += device/google/caimito-sepolicy/tokay

View file

@ -0,0 +1,2 @@
This folder holds sepolicy exclusively for one device. For example, genfs_contexts
paths that are affected by device tree.

View file

@ -0,0 +1,13 @@
# Devices
/dev/lwis-act-cornerfolk u:object_r:lwis_device:s0
/dev/lwis-act-cornerfolk-dokkaebi u:object_r:lwis_device:s0
/dev/lwis-act-cornerfolk-taotie-uw u:object_r:lwis_device:s0
/dev/lwis-eeprom-djinn u:object_r:lwis_device:s0
/dev/lwis-eeprom-smaug-dokkaebi u:object_r:lwis_device:s0
/dev/lwis-eeprom-smaug-taotie-uw u:object_r:lwis_device:s0
/dev/lwis-flash-lm3644 u:object_r:lwis_device:s0
/dev/lwis-ois-djinn u:object_r:lwis_device:s0
/dev/lwis-sensor-boitata u:object_r:lwis_device:s0
/dev/lwis-sensor-dokkaebi u:object_r:lwis_device:s0
/dev/lwis-sensor-taotie-uw u:object_r:lwis_device:s0
/dev/lwis-tof-tarasque u:object_r:lwis_device:s0

View file

@ -0,0 +1,8 @@
# WLC
genfscon sysfs /devices/platform/10ca0000.hsi2c/i2c-10/10-003b u:object_r:sysfs_wlc:s0
#Wakeup node
genfscon sysfs /devices/platform/odm/odm:qcom,qbt-handler/power/wakeup u:object_r:sysfs_wakeup:s0
genfscon sysfs /devices/platform/110f0000.drmdp/wakeup u:object_r:sysfs_wakeup:s0
genfscon sysfs /devices/platform/111d0000.spi/spi_master/spi20/spi20.0/synaptics_tcm.0/power/wakeup u:object_r:sysfs_wakeup:s0
genfscon sysfs /devices/platform/111d0000.spi/spi_master/spi20/spi20.0/synaptics_tcm.0/wakeup u:object_r:sysfs_wakeup:s0

View file

@ -0,0 +1,7 @@
allow grilservice_app hal_radio_ext_service:service_manager find;
binder_call(grilservice_app, hal_radio_ext)
binder_use(grilservice_app)
allow grilservice_app gril_antenna_tuning_service:service_manager find;
binder_call(grilservice_app, gril_antenna_tuning_service)
binder_call(grilservice_app, twoshay)

View file

@ -0,0 +1,2 @@
# TODO (b/306087355) Remove this and make it specific to the app
hal_client_domain(system_app, hal_fingerprint)

View file

@ -0,0 +1,4 @@
# Vendor Ims Service property - Set the audio path for PDK build
userdebug_or_eng(`
set_prop(vendor_init, vendor_imssvc_prop)
')

View file

@ -0,0 +1,2 @@
This folder stores known errors detected by PTS. Be sure to remove relevant
files to reproduce error log on latest ROMs.

View file

@ -0,0 +1 @@