From 13470b8cec3a6620e680b1727fa4478f12060c2d Mon Sep 17 00:00:00 2001 From: Wayne Lin Date: Sat, 13 Jan 2024 11:15:53 +0800 Subject: [PATCH] gps: refine iGNSS build system - sepolicy Bug: 318310869 Bug: 315915958 Test: build pass and GPS function works Change-Id: Ie98482de964c8478f94886cd1494c6362e2c86d9 --- vendor/file_contexts | 11 ----------- vendor/gnss_check.te | 9 --------- vendor/gnssd.te | 23 ----------------------- vendor/hal_gnss_default.te | 3 --- vendor/rild.te | 1 - vendor/sctd.te | 3 --- vendor/spad.te | 3 --- vendor/swcnd.te | 3 --- 8 files changed, 56 deletions(-) delete mode 100644 vendor/gnss_check.te delete mode 100644 vendor/gnssd.te delete mode 100644 vendor/hal_gnss_default.te delete mode 100644 vendor/rild.te delete mode 100644 vendor/sctd.te delete mode 100644 vendor/spad.te delete mode 100644 vendor/swcnd.te diff --git a/vendor/file_contexts b/vendor/file_contexts index 15fc062..e225278 100644 --- a/vendor/file_contexts +++ b/vendor/file_contexts @@ -1,8 +1,3 @@ -# GPS -/dev/gnss_ipc u:object_r:vendor_gnss_device:s0 -/dev/gnss_boot u:object_r:vendor_gnss_device:s0 -/dev/gnss_dump u:object_r:vendor_gnss_device:s0 - # Devices /dev/lwis-act-cornerfolk u:object_r:lwis_device:s0 /dev/lwis-act-jotnar u:object_r:lwis_device:s0 @@ -23,12 +18,6 @@ /dev/lwis-tof-tarasque u:object_r:lwis_device:s0 # Services -/vendor/bin/hw/gnssd u:object_r:gnssd_exec:s0 -/vendor/bin/hw/sctd u:object_r:sctd_exec:s0 -/vendor/bin/hw/swcnd u:object_r:swcnd_exec:s0 -/vendor/bin/hw/spad u:object_r:spad_exec:s0 -/vendor/bin/hw/gnss-aidl-service_IGnssV2_ISlsiGnssV1 u:object_r:hal_gnss_default_exec:s0 -/vendor/bin/gnss_check\.sh u:object_r:gnss_check_exec:s0 /vendor/bin/init_thermal_config u:object_r:init_thermal_config_exec:s0 # FPC AIDL HAL /vendor/bin/hw/android\.hardware\.biometrics\.fingerprint-service\.fpc42_fw49 u:object_r:hal_fingerprint_capacitance_exec:s0 diff --git a/vendor/gnss_check.te b/vendor/gnss_check.te deleted file mode 100644 index 31d0944..0000000 --- a/vendor/gnss_check.te +++ /dev/null @@ -1,9 +0,0 @@ -type gnss_check, domain; -type gnss_check_exec, exec_type, vendor_file_type, file_type; - -init_daemon_domain(gnss_check); - -allow gnss_check vendor_toolbox_exec:file { execute_no_trans }; - -set_prop(gnss_check, ctl_stop_prop); -set_prop(gnss_check, ctl_start_prop); diff --git a/vendor/gnssd.te b/vendor/gnssd.te deleted file mode 100644 index ea16762..0000000 --- a/vendor/gnssd.te +++ /dev/null @@ -1,23 +0,0 @@ -type gnssd, domain; -type gnssd_exec, exec_type, vendor_file_type, file_type; -init_daemon_domain(gnssd); - -# Allow gnssd to access rild -binder_call(gnssd, rild); -# binder_call(gnssd, hwservicemanager) -allow gnssd hal_exynos_rild_hwservice:hwservice_manager find; -allow gnssd radio_device:chr_file rw_file_perms; - -# Allow gnssd to acess gnss device -allow gnssd vendor_gnss_device:chr_file rw_file_perms; -allow gnssd vendor_gps_file:dir create_dir_perms; -allow gnssd vendor_gps_file:file create_file_perms; -allow gnssd vendor_gps_file:fifo_file create_file_perms; - -get_prop(gnssd, bootanim_system_prop) - -# Allow gnssd to obtain wakelock -wakelock_use(gnssd) - -# Allow a base set of permissions required for network access. -net_domain(gnssd); diff --git a/vendor/hal_gnss_default.te b/vendor/hal_gnss_default.te deleted file mode 100644 index bf1a564..0000000 --- a/vendor/hal_gnss_default.te +++ /dev/null @@ -1,3 +0,0 @@ -binder_call(hal_gnss_default, gnssd); - -allow hal_gnss_default gnssd:unix_stream_socket connectto; diff --git a/vendor/rild.te b/vendor/rild.te deleted file mode 100644 index c620a19..0000000 --- a/vendor/rild.te +++ /dev/null @@ -1 +0,0 @@ -binder_call(rild, gnssd) diff --git a/vendor/sctd.te b/vendor/sctd.te deleted file mode 100644 index 8966ef8..0000000 --- a/vendor/sctd.te +++ /dev/null @@ -1,3 +0,0 @@ -type sctd, domain; -type sctd_exec, exec_type, vendor_file_type, file_type; -init_daemon_domain(sctd); diff --git a/vendor/spad.te b/vendor/spad.te deleted file mode 100644 index eaf8b1c..0000000 --- a/vendor/spad.te +++ /dev/null @@ -1,3 +0,0 @@ -type spad, domain; -type spad_exec, exec_type, vendor_file_type, file_type; -init_daemon_domain(spad); diff --git a/vendor/swcnd.te b/vendor/swcnd.te deleted file mode 100644 index c366cad..0000000 --- a/vendor/swcnd.te +++ /dev/null @@ -1,3 +0,0 @@ -type swcnd, domain; -type swcnd_exec, exec_type, vendor_file_type, file_type; -init_daemon_domain(swcnd);