move insmod script to gs-common

Bug: 243763292
Test: boot to home
Change-Id: If676806d806adcd7f1fcecc1199255788e8858ef
This commit is contained in:
Adam Shih 2022-09-05 11:38:18 +08:00
parent e6e9e34d22
commit 5742be1014
2 changed files with 12 additions and 1 deletions

View file

@ -280,7 +280,8 @@
/mnt/vendor/persist/modem(/.*)? u:object_r:persist_modem_file:s0 /mnt/vendor/persist/modem(/.*)? u:object_r:persist_modem_file:s0
# Kernel modules related # Kernel modules related
/vendor/bin/init\.insmod\.sh u:object_r:init-insmod-sh_exec:s0 /vendor/bin/insmod\.sh u:object_r:init-insmod-sh_exec:s0
/vendor/bin/init\.display\.sh u:object_r:init-display-sh_exec:s0
# USB # USB
/vendor/bin/hw/disable_contaminant_detection\.sh u:object_r:disable-contaminant-detection-sh_exec:s0 /vendor/bin/hw/disable_contaminant_detection\.sh u:object_r:disable-contaminant-detection-sh_exec:s0

View file

@ -0,0 +1,10 @@
type init-display-sh, domain;
type init-display-sh_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(init-display-sh)
allow init-display-sh self:capability sys_module;
allow init-display-sh vendor_kernel_modules:system module_load;
allow init-display-sh vendor_toolbox_exec:file execute_no_trans;
dontaudit init-display-sh proc_cmdline:file r_file_perms;