device_google_felix/vendor
Mason Wang 3c82f575b9 Allow dumpstate to access touch vendor nodes[DO NOT MERGE]
Fix following avc denial log:
avc: denied { read } for name="driver_test" dev="proc" ino=4026535583 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:proc:s0 tclass=file permissive=1 bug=b/240632721
avc: denied { write } for name="driver_test" dev="proc" ino=4026535583 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:proc:s0 tclass=file permissive=1 bug=b/240632721
avc: denied { open } for path="/proc/fts/driver_test" dev="proc" ino=4026535583 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:proc:s0 tclass=file permissive=1 bug=b/240632721
avc: denied { open } for path="/sys/devices/platform/10950000.spi/spi_master/spi6/spi6.0/appid" dev="sysfs" ino=110523 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 bug=b/240632721
avc: denied { open } for path="/sys/devices/platform/10950000.spi/spi_master/spi6/spi6.0/stm_fts_cmd" dev="sysfs" ino=110529 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 bug=b/240632721
avc: denied { open } for path="/proc/fts_ext/driver_test" dev="proc" ino=4026535585 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:proc:s0 tclass=file permissive=1 bug=b/240632721
avc: denied { write } for name="stm_fts_cmd" dev="sysfs" ino=113133 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 bug=b/240632721
avc: denied { read } for name="stm_fts_cmd" dev="sysfs" ino=113133 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=1 bug=b/240632721
avc: denied { read } for name="appid" dev="sysfs" ino=108992 scontext=u:r:hal_dumpstate_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file permissive=0 bug=b/240632721


Bug: 226475119
Bug: 254164096
Test: There are no above avc denial logs.
Change-Id: I0a136a7e259640e3e13ea66c945251cf26878b33
2022-11-24 15:35:16 +08:00
..
device.te add sepolicy for vibrator manager service 2022-11-03 12:14:03 +08:00
file_contexts add sepolicy for vibrator manager service 2022-11-03 12:14:03 +08:00
genfs_contexts Allow dumpstate to access touch vendor nodes[DO NOT MERGE] 2022-11-24 15:35:16 +08:00
hal_vibrator_default.te add sepolicy for vibrator manager service 2022-11-03 12:14:03 +08:00
hal_vibrator_stereo_default.te add sepolicy for vibrator manager service 2022-11-03 12:14:03 +08:00
README.txt Initial device felix sepolicy 2021-12-06 12:12:10 +08:00
service_contexts Add service context for IDisplay/secondary 2022-06-14 21:58:44 +08:00
vndservice.te add sepolicy for vibrator manager service 2022-11-03 12:14:03 +08:00
vndservice_contexts add sepolicy for vibrator manager service 2022-11-03 12:14:03 +08:00

This folder holds sepolicy exclusively for one device. For example, genfs_contexts
paths that are affected by device tree.