gs101: Manual fixes to make sepolicy build
Change-Id: I9f9057fd572388a0dfb00554e9b6a3bb63795461
This commit is contained in:
3
sepolicy/vendor/mediacodec_samsung.te
vendored
3
sepolicy/vendor/mediacodec_samsung.te
vendored
@@ -25,6 +25,7 @@ allow mediacodec_samsung sysfs_mfc:dir r_dir_perms;
|
||||
allow mediacodec_samsung sysfs_mfc:file r_file_perms;
|
||||
allow mediacodec_samsung video_device:chr_file rw_file_perms;
|
||||
|
||||
neverallow mediacodec_samsung domain:{ rawip_socket tcp_socket udp_socket } *;
|
||||
neverallow mediacodec_samsung { domain userdebug_or_eng(`-su') }:tcp_socket *;
|
||||
neverallow mediacodec_samsung domain:{ rawip_socket udp_socket } *;
|
||||
neverallow mediacodec_samsung file_type:file execute_no_trans;
|
||||
neverallow mediacodec_samsung fs_type:file execute_no_trans;
|
||||
|
||||
6
sepolicy/vendor/uwb_vendor_app.te
vendored
6
sepolicy/vendor/uwb_vendor_app.te
vendored
@@ -2,17 +2,23 @@ type uwb_vendor_app, domain;
|
||||
|
||||
app_domain(uwb_vendor_app)
|
||||
|
||||
not_recovery(`
|
||||
binder_call(uwb_vendor_app, hal_uwb_vendor_default)
|
||||
')
|
||||
|
||||
get_prop(uwb_vendor_app, vendor_secure_element_prop)
|
||||
|
||||
not_recovery(`
|
||||
hal_client_domain(uwb_vendor_app, hal_uwb_vendor)
|
||||
')
|
||||
|
||||
set_prop(uwb_vendor_app, vendor_uwb_calibration_country_code)
|
||||
|
||||
not_recovery(`
|
||||
allow uwb_vendor_app app_api_service:service_manager find;
|
||||
allow uwb_vendor_app hal_uwb_vendor_service:service_manager find;
|
||||
allow uwb_vendor_app nfc_service:service_manager find;
|
||||
allow uwb_vendor_app radio_service:service_manager find;
|
||||
allow uwb_vendor_app uwb_vendor_data_file:dir create_dir_perms;
|
||||
allow uwb_vendor_app uwb_vendor_data_file:file create_file_perms;
|
||||
')
|
||||
|
||||
Reference in New Issue
Block a user