Update selinux-policy for ModemService.

Allowing the ModemService write access to the sysfs attribute
cp_temp which is used to update the thermal zones.

Test: Verified sysfs attribute security labels
Bug: 267485434
Change-Id: I0915969bfa6354e1884088476fc59cd8027bd2f1
Signed-off-by: Mahesh Kallelil <kallelil@google.com>
This commit is contained in:
Mahesh Kallelil 2023-03-15 15:45:32 -07:00
parent f5a068e2bf
commit 0e62b47df9
3 changed files with 7 additions and 0 deletions

View file

@ -83,6 +83,7 @@ type vendor_dumpsys, vendor_file_type, file_type;
# Modem # Modem
type modem_efs_file, file_type; type modem_efs_file, file_type;
type modem_userdata_file, file_type; type modem_userdata_file, file_type;
type sysfs_modem, sysfs_type, fs_type;
# SecureElement # SecureElement
type sysfs_st33spi, sysfs_type, fs_type; type sysfs_st33spi, sysfs_type, fs_type;

View file

@ -60,6 +60,9 @@ genfscon sysfs /devices/platform/10970000.hsi2c/i2c-7/i2c-st21nfc/power_stats
genfscon sysfs /devices/platform/10970000.hsi2c/i2c-8/i2c-st21nfc/power_stats u:object_r:sysfs_power_stats:s0 genfscon sysfs /devices/platform/10970000.hsi2c/i2c-8/i2c-st21nfc/power_stats u:object_r:sysfs_power_stats:s0
genfscon sysfs /devices/platform/10db0000.spi/spi_master/spi16/spi16.0/uwb/power_stats u:object_r:sysfs_power_stats:s0 genfscon sysfs /devices/platform/10db0000.spi/spi_master/spi16/spi16.0/uwb/power_stats u:object_r:sysfs_power_stats:s0
# Modem
genfscon sysfs /devices/platform/cp-tm1/cp_temp u:object_r:sysfs_modem:s0
# Power ODPM # Power ODPM
genfscon sysfs /devices/platform/acpm_mfd_bus@18100000/i2c-0/i2c-s2mpg12mfd/s2mpg12-meter/s2mpg12-odpm/iio:device u:object_r:sysfs_odpm:s0 genfscon sysfs /devices/platform/acpm_mfd_bus@18100000/i2c-0/i2c-s2mpg12mfd/s2mpg12-meter/s2mpg12-odpm/iio:device u:object_r:sysfs_odpm:s0
genfscon sysfs /devices/platform/acpm_mfd_bus@18100000/i2c-1/i2c-s2mpg12mfd/s2mpg12-meter/s2mpg12-odpm/iio:device u:object_r:sysfs_odpm:s0 genfscon sysfs /devices/platform/acpm_mfd_bus@18100000/i2c-1/i2c-s2mpg12mfd/s2mpg12-meter/s2mpg12-odpm/iio:device u:object_r:sysfs_odpm:s0

View file

@ -5,6 +5,9 @@ init_daemon_domain(modem_svc_sit)
hwbinder_use(modem_svc_sit) hwbinder_use(modem_svc_sit)
binder_call(modem_svc_sit, rild) binder_call(modem_svc_sit, rild)
# Grant sysfs modem access
allow modem_svc_sit sysfs_modem:file rw_file_perms;
# Grant radio device access # Grant radio device access
allow modem_svc_sit radio_device:chr_file rw_file_perms; allow modem_svc_sit radio_device:chr_file rw_file_perms;