Evolution-X-Tensor/device_google_gs101
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add touch procfs and sysfs sepolicy

Browse source 
Touch palm sepolicies are not included.

Bug: 173330981
Test: No avc denied log for touch sysfs, procfs access.
Signed-off-by: Tai Kuo <taikuo@google.com>
Change-Id: Idf510e4a9c65e5af0885159353ef85d6b6ec553f
This commit is contained in:
Tai Kuo 2021-03-10 17:00:16 +08:00
parent c625222492
commit 4dd3e1e99e
2 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
whitechapel/vendor/google/genfs_contexts vendored
View file

@ -76,8 +76,10 @@ genfscon sysfs /devices/platform/acpm_mfd_bus@17500000/i2c-6/6-001f/wakeup/wakeu
genfscon sysfs /devices/platform/19000000.aoc/usb_control/wakeup/wakeup u:object_r:sysfs_wakeup:s0
# Touch
genfscon sysfs /class/spi_master/spi11/spi11.0 u:object_r:sysfs_touch:s0
genfscon sysfs /devices/platform/10d40000.spi/spi_master/spi11/spi11.0 u:object_r:sysfs_touch:s0
genfscon sysfs /devices/platform/10950000.spi/spi_master/spi6/spi6.0 u:object_r:sysfs_touch:s0
genfscon proc /fts/driver_test u:object_r:proc_touch:s0
genfscon proc /fts_ext/driver_test u:object_r:proc_touch:s0
genfscon sysfs /devices/virtual/sec/tsp u:object_r:sysfs_touch:s0
# EdgeTPU

5
whitechapel/vendor/google/hal_dumpstate_default.te vendored
View file

@ -44,6 +44,11 @@ allow hal_dumpstate_default aoc_device:chr_file rw_file_perms;
allow hal_dumpstate_default sysfs_wifi:dir search;
allow hal_dumpstate_default sysfs_wifi:file r_file_perms;
# Touch sysfs interface
allow hal_dumpstate_default sysfs_touch:dir r_dir_perms;
allow hal_dumpstate_default sysfs_touch:file rw_file_perms;
allow hal_dumpstate_default proc_touch:file rw_file_perms;
allow hal_dumpstate_default sysfs_thermal:dir r_dir_perms;
allow hal_dumpstate_default sysfs_thermal:file r_file_perms;
allow hal_dumpstate_default sysfs_thermal:lnk_file read;