Merge "gs101-sepolicy: Fix avc denial for sysfs_vendor_sched" into sc-dev

This commit is contained in:
TreeHugger Robot 2021-06-10 07:20:58 +00:00 committed by Android (Google) Code Review
commit a501b656dd
6 changed files with 15 additions and 9 deletions

View file

@ -37,3 +37,6 @@ BOARD_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/wifi_sniffer
# Wifi Logger # Wifi Logger
BOARD_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/wifi_logger BOARD_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/wifi_logger
# Public
PRODUCT_PUBLIC_SEPOLICY_DIRS += device/google/gs101-sepolicy/public

View file

@ -0,0 +1,2 @@
dontaudit mediaprovider_app sysfs_vendor_sched:dir search;

7
public/file.te Normal file
View file

@ -0,0 +1,7 @@
# Vendor sched files
type sysfs_vendor_sched, sysfs_type, fs_type;
userdebug_or_eng(`
typeattribute sysfs_vendor_sched mlstrustedobject;
')
type proc_vendor_sched, proc_type, fs_type;

View file

@ -1,2 +0,0 @@
# b/190563916
dontaudit bluetooth sysfs_vendor_sched:dir search;

View file

@ -0,0 +1,3 @@
allow bluetooth sysfs_vendor_sched:dir search;
allow bluetooth sysfs_vendor_sched:file w_file_perms;

View file

@ -134,13 +134,6 @@ type vendor_camera_tuning_file, vendor_file_type, file_type;
type vendor_camera_data_file, file_type, data_file_type; type vendor_camera_data_file, file_type, data_file_type;
type sysfs_camera, sysfs_type, fs_type; type sysfs_camera, sysfs_type, fs_type;
# Vendor sched files
type sysfs_vendor_sched, sysfs_type, fs_type;
userdebug_or_eng(`
typeattribute sysfs_vendor_sched mlstrustedobject;
')
type proc_vendor_sched, proc_type, fs_type;
# GPS # GPS
type vendor_gps_file, file_type, data_file_type; type vendor_gps_file, file_type, data_file_type;
userdebug_or_eng(` userdebug_or_eng(`