Evolution-X-Tensor/device_google_gs101
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge "Add sepolicy for the wifi firmware config OTA feature" into sc-dev am: acf218cb51

Browse source 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13983837

Change-Id: I00b8c3c91c9373168d80a7fda2268add40375310
This commit is contained in:
Steven Liu 2021-03-25 15:05:44 +00:00 • committed by Automerger Merge Worker
commit 3dee8cecad
4 changed files with 17 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
whitechapel/vendor/google/file.te vendored
View file

@ -71,6 +71,9 @@ type sysfs_sscoredump_level, sysfs_type, fs_type;
# WiFi
type sysfs_wifi, sysfs_type, fs_type;
# All files under /data/vendor/firmware/wifi
type updated_wifi_firmware_data_file, file_type, data_file_type;
# Widevine DRM
type mediadrm_vendor_data_file, file_type, data_file_type;

3
whitechapel/vendor/google/file_contexts vendored
View file

@ -426,3 +426,6 @@
# Fingerprint
/dev/goodix_fp u:object_r:fingerprint_device:s0
# Wifi Firmware config update
/data/vendor/firmware/wifi(/.*)? u:object_r:updated_wifi_firmware_data_file:s0

3
whitechapel/vendor/google/hal_wifi.te vendored Normal file
View file

@ -0,0 +1,3 @@
# files in /data/vendor/firmware/wifi
allow hal_wifi updated_wifi_firmware_data_file:dir r_dir_perms;
allow hal_wifi updated_wifi_firmware_data_file:file r_file_perms;

8
whitechapel/vendor/google/hal_wifi_ext.te vendored
View file

@ -3,3 +3,11 @@ binder_call(hal_wifi_ext, grilservice_app)
# Write wlan driver/fw version into property
set_prop(hal_wifi_ext, vendor_wifi_version)
# Allow wifi_ext to read and write /data/vendor/firmware/wifi
allow hal_wifi_ext updated_wifi_firmware_data_file:dir rw_dir_perms;
allow hal_wifi_ext updated_wifi_firmware_data_file:file create_file_perms;
# Allow wifi_ext to read the updated firmware files from app
allow hal_wifi_ext priv_app:fd use;
allow hal_wifi_ext privapp_data_file:file { read map };