diff --git a/audio/sepolicy/common/property_contexts b/audio/sepolicy/common/property_contexts index 96e678c..9f88e55 100644 --- a/audio/sepolicy/common/property_contexts +++ b/audio/sepolicy/common/property_contexts @@ -1,3 +1,6 @@ +# for serial no +vendor.audio_hal.device.serialno u:object_r:vendor_audio_prop:s0 + # for audio vendor.audio_hal.period_multiplier u:object_r:vendor_audio_prop:s0 vendor.audiodump.enable u:object_r:vendor_audio_prop:s0 diff --git a/touch/gti/predump_sepolicy/genfs_contexts b/touch/gti/predump_sepolicy/genfs_contexts index 45d3b53..1dd4bad 100644 --- a/touch/gti/predump_sepolicy/genfs_contexts +++ b/touch/gti/predump_sepolicy/genfs_contexts @@ -1,4 +1,6 @@ # Touch genfscon sysfs /devices/virtual/goog_touch_interface u:object_r:sysfs_touch_gti:s0 +genfscon sysfs /devices/virtual/goog_touch_interface/gti.0/wakeup u:object_r:sysfs_wakeup:s0 +genfscon sysfs /devices/virtual/goog_touch_interface/gti.1/wakeup u:object_r:sysfs_wakeup:s0 genfscon proc /goog_touch_interface u:object_r:proc_touch_gti:s0 diff --git a/touch/gti/sepolicy/genfs_contexts b/touch/gti/sepolicy/genfs_contexts index 45d3b53..1dd4bad 100644 --- a/touch/gti/sepolicy/genfs_contexts +++ b/touch/gti/sepolicy/genfs_contexts @@ -1,4 +1,6 @@ # Touch genfscon sysfs /devices/virtual/goog_touch_interface u:object_r:sysfs_touch_gti:s0 +genfscon sysfs /devices/virtual/goog_touch_interface/gti.0/wakeup u:object_r:sysfs_wakeup:s0 +genfscon sysfs /devices/virtual/goog_touch_interface/gti.1/wakeup u:object_r:sysfs_wakeup:s0 genfscon proc /goog_touch_interface u:object_r:proc_touch_gti:s0 diff --git a/touch/nvt/nvt-spi20.mk b/touch/nvt/nvt-spi20.mk new file mode 100644 index 0000000..ad46fcc --- /dev/null +++ b/touch/nvt/nvt-spi20.mk @@ -0,0 +1,2 @@ +BOARD_VENDOR_SEPOLICY_DIRS += device/google/gs-common/touch/nvt/sepolicy +BOARD_VENDOR_SEPOLICY_DIRS += device/google/gs-common/touch/nvt/sepolicy-spi20 diff --git a/touch/nvt/sepolicy-spi20/genfs_contexts b/touch/nvt/sepolicy-spi20/genfs_contexts new file mode 100644 index 0000000..05467a3 --- /dev/null +++ b/touch/nvt/sepolicy-spi20/genfs_contexts @@ -0,0 +1,8 @@ +# Touch +genfscon sysfs /devices/platform/111d0000.spi/spi_master/spi20/spi20.0 u:object_r:sysfs_touch:s0 + +# System suspend wakeup files +genfscon sysfs /devices/platform/111d0000.spi/spi_master/spi20/spi20.0/power_supply/nvt-pen-battery/wakeup u:object_r:sysfs_wakeup:s0 +genfscon sysfs /devices/platform/111d0000.spi/spi_master/spi20/spi20.0/power_supply/USI_Stylus_Battery/wakeup u:object_r:sysfs_wakeup:s0 +genfscon sysfs /devices/platform/111d0000.spi/spi_master/spi20/spi20.0/input/input2/wakeup u:object_r:sysfs_wakeup:s0 +genfscon sysfs /devices/platform/111d0000.spi/spi_master/spi20/spi20.0/wakeup u:object_r:sysfs_wakeup:s0 diff --git a/touch/nvt/sepolicy/file.te b/touch/nvt/sepolicy/file.te index e310df7..05a770b 100644 --- a/touch/nvt/sepolicy/file.te +++ b/touch/nvt/sepolicy/file.te @@ -1 +1,2 @@ type sysfs_touch, sysfs_type, fs_type; +type proc_touch, proc_type, fs_type; diff --git a/touch/nvt/sepolicy/genfs_contexts b/touch/nvt/sepolicy/genfs_contexts new file mode 100644 index 0000000..b120511 --- /dev/null +++ b/touch/nvt/sepolicy/genfs_contexts @@ -0,0 +1,12 @@ +genfscon proc /nvt_baseline u:object_r:proc_touch:s0 +genfscon proc /nvt_cc_uniformity u:object_r:proc_touch:s0 +genfscon proc /nvt_diff u:object_r:proc_touch:s0 +genfscon proc /nvt_fw_update u:object_r:proc_touch:s0 +genfscon proc /nvt_fw_version u:object_r:proc_touch:s0 +genfscon proc /nvt_heatmap u:object_r:proc_touch:s0 +genfscon proc /nvt_pen_1d_diff u:object_r:proc_touch:s0 +genfscon proc /nvt_pen_2d_baseline u:object_r:proc_touch:s0 +genfscon proc /nvt_pen_2d_diff u:object_r:proc_touch:s0 +genfscon proc /nvt_pen_2d_raw u:object_r:proc_touch:s0 +genfscon proc /nvt_raw u:object_r:proc_touch:s0 +genfscon proc /nvt_selftest u:object_r:proc_touch:s0 diff --git a/touch/nvt/sepolicy/vendor_init.te b/touch/nvt/sepolicy/vendor_init.te new file mode 100644 index 0000000..8b844dd --- /dev/null +++ b/touch/nvt/sepolicy/vendor_init.te @@ -0,0 +1,5 @@ +allow vendor_init sysfs_touch:dir r_dir_perms; +allow vendor_init sysfs_touch:file rw_file_perms; +allow vendor_init proc_touch:dir r_dir_perms; +allow vendor_init proc_touch:file rw_file_perms; +set_prop(vendor_init, gesture_prop)