Evolution-X-Tensor/device_google_gs201
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

restart dauntless sepolicy

Browse source 
Bug: 199685763
Test: build ROM with relevant modules labeled correctly
Change-Id: I9d01ad1dea9da059cb91142adadd3f55f50cf9ca
This commit is contained in:
Adam Shih 2021-09-13 14:41:01 +08:00
parent 256795caa7
commit 01d2b96516
14 changed files with 42 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

6
dauntless/citadel_provision.te Normal file
View file

@ -0,0 +1,6 @@
type citadel_provision, domain;
type citadel_provision_exec, exec_type, vendor_file_type, file_type;
userdebug_or_eng(`
init_daemon_domain(citadel_provision)
')

4
dauntless/citadeld.te Normal file
View file

@ -0,0 +1,4 @@
type citadeld, domain;
type citadeld_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(citadeld)

1
dauntless/device.te Normal file
View file

@ -0,0 +1 @@
type citadel_device, dev_type;

1
dauntless/file.te Normal file
View file

@ -0,0 +1 @@
type citadel_updater, vendor_file_type, file_type;

9
dauntless/file_contexts Normal file
View file

@ -0,0 +1,9 @@
/vendor/bin/CitadelProvision u:object_r:citadel_provision_exec:s0
/vendor/bin/hw/init_citadel u:object_r:init_citadel_exec:s0
/vendor/bin/hw/android\.hardware\.security\.keymint-service\.citadel u:object_r:hal_keymint_citadel_exec:s0
/vendor/bin/hw/android\.hardware\.weaver@1\.0-service\.citadel u:object_r:hal_weaver_citadel_exec:s0
/vendor/bin/hw/android\.hardware\.identity@1\.0-service\.citadel u:object_r:hal_identity_citadel_exec:s0
/vendor/bin/hw/citadel_updater u:object_r:citadel_updater:s0
/vendor/bin/hw/citadeld u:object_r:citadeld_exec:s0
/dev/gsc0 u:object_r:citadel_device:s0

4
dauntless/hal_identity_citadel.te Normal file
View file

@ -0,0 +1,4 @@
type hal_identity_citadel, domain;
type hal_identity_citadel_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_identity_citadel)

4
dauntless/hal_keymint_citadel.te Normal file
View file

@ -0,0 +1,4 @@
type hal_keymint_citadel, domain;
type hal_keymint_citadel_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_keymint_citadel)

4
dauntless/hal_weaver_citadel.te Normal file
View file

@ -0,0 +1,4 @@
type hal_weaver_citadel, domain;
type hal_weaver_citadel_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_weaver_citadel)

4
dauntless/init_citadel.te Normal file
View file

@ -0,0 +1,4 @@
type init_citadel, domain;
type init_citadel_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(init_citadel)

1
dauntless/vndservice.te Normal file
View file

@ -0,0 +1 @@
type citadeld_service, vndservice_manager_type;

4
gs201-sepolicy.mk
View file

@ -14,8 +14,8 @@ SYSTEM_EXT_PRIVATE_SEPOLICY_DIRS += device/google/gs201-sepolicy/system_ext/priv
#
# Pixel-wide
#
# Dauntless (uses Citadel policy currently)
BOARD_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/citadel
# Dauntless sepolicy (b/199685763)
BOARD_SEPOLICY_DIRS += device/google/gs201-sepolicy/dauntless
# Wifi
BOARD_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/wifi_ext

3
legacy/file_contexts
View file

@ -183,9 +183,6 @@
# R4
/vendor/bin/hw/hardware\.qorvo\.uwb-service u:object_r:hal_uwb_vendor_default_exec:s0
# Citadel StrongBox
/dev/gsc0 u:object_r:citadel_device:s0
# Tetheroffload Service
/dev/dit2 u:object_r:vendor_toe_device:s0
/vendor/bin/hw/vendor\.samsung_slsi\.hardware\.tetheroffload@1\.0-service u:object_r:hal_tetheroffload_default_exec:s0

2
legacy/hal_dumpstate_default.te
View file

@ -84,7 +84,7 @@ allow hal_dumpstate_default sysfs_scsi_devices_0000:dir r_dir_perms;
allow hal_dumpstate_default sysfs_scsi_devices_0000:file r_file_perms;
allow hal_dumpstate_default citadeld_service:service_manager find;
allow hal_dumpstate_default citadel_updater_exec:file execute_no_trans;
allow hal_dumpstate_default citadel_updater:file execute_no_trans;
binder_call(hal_dumpstate_default, citadeld);
allow hal_dumpstate_default vendor_displaycolor_service:service_manager find;

1
whitechapel_pro/vndservice.te Normal file
View file

@ -0,0 +1 @@
type hal_power_stats_vendor_service, vndservice_manager_type;