Evolution-X-Tensor/device_google_gs201
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

WLC: Add required sysfs_wlc sepolicies

Browse source 
The sysfs_wlc is still required for certain services like
hal_health_default. Add these sepolicies to pass the tests.

Bug: 267171670
Change-Id: Id2687a4ac72e04e537704d036155167b68aeca7c
Signed-off-by: Ken Yang <yangken@google.com>
This commit is contained in:
Ken Yang 2023-01-31 15:10:41 +00:00
parent dadd1df282
commit 1d9a7c5877
5 changed files with 12 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
whitechapel_pro/hal_dumpstate_default.te
View file

@ -9,6 +9,10 @@ allow hal_dumpstate_default vendor_hwc_log_file:file r_file_perms;
allow hal_dumpstate_default vendor_gps_file:dir r_dir_perms; allow hal_dumpstate_default vendor_gps_file:dir r_dir_perms;
allow hal_dumpstate_default vendor_gps_file:file r_file_perms; allow hal_dumpstate_default vendor_gps_file:file r_file_perms;
allow hal_dumpstate_default sysfs_wlc:dir search;
allow hal_dumpstate_default sysfs_wlc:dir r_dir_perms;
allow hal_dumpstate_default sysfs_wlc:file r_file_perms;
allow hal_dumpstate_default sysfs_exynos_bts:dir r_dir_perms; allow hal_dumpstate_default sysfs_exynos_bts:dir r_dir_perms;
allow hal_dumpstate_default sysfs_exynos_bts_stats:file r_file_perms; allow hal_dumpstate_default sysfs_exynos_bts_stats:file r_file_perms;

1
whitechapel_pro/hal_health_default.te
View file

@ -12,6 +12,7 @@ allow hal_health_default sysfs_scsi_devices_0000:file rw_file_perms;
allow hal_health_default fwk_stats_service:service_manager find; allow hal_health_default fwk_stats_service:service_manager find;
binder_use(hal_health_default) binder_use(hal_health_default)
allow hal_health_default sysfs_wlc:dir search;
allow hal_health_default sysfs_batteryinfo:file w_file_perms; allow hal_health_default sysfs_batteryinfo:file w_file_perms;
allow hal_health_default sysfs_thermal:dir search; allow hal_health_default sysfs_thermal:dir search;
allow hal_health_default sysfs_thermal:file w_file_perms; allow hal_health_default sysfs_thermal:file w_file_perms;

1
whitechapel_pro/hal_sensors_default.te
View file

@ -84,3 +84,4 @@ allow hal_sensors_default sysfs_write_leds:file rw_file_perms;
# Allow access to the power supply files for MagCC. # Allow access to the power supply files for MagCC.
r_dir_file(hal_sensors_default, sysfs_batteryinfo) r_dir_file(hal_sensors_default, sysfs_batteryinfo)
allow hal_sensors_default sysfs_wlc:dir r_dir_perms;

3
whitechapel_pro/pixelstats_vendor.te
View file

@ -6,6 +6,9 @@ hwbinder_use(pixelstats_vendor)
allow pixelstats_vendor sysfs_scsi_devices_0000:file rw_file_perms; allow pixelstats_vendor sysfs_scsi_devices_0000:file rw_file_perms;
allow pixelstats_vendor sysfs_pixelstats:file r_file_perms; allow pixelstats_vendor sysfs_pixelstats:file r_file_perms;
# Wireless charge
allow pixelstats_vendor sysfs_wlc:dir search;
allow pixelstats_vendor sysfs_wlc:file rw_file_perms;
# Wireless charge/OrientationCollector # Wireless charge/OrientationCollector
get_prop(pixelstats_vendor, hwservicemanager_prop); get_prop(pixelstats_vendor, hwservicemanager_prop);
hwbinder_use(pixelstats_vendor); hwbinder_use(pixelstats_vendor);

3
whitechapel_pro/shell.te
View file

@ -3,3 +3,6 @@ userdebug_or_eng(`
allow shell sysfs_sjtag:dir r_dir_perms; allow shell sysfs_sjtag:dir r_dir_perms;
allow shell sysfs_sjtag:file rw_file_perms; allow shell sysfs_sjtag:file rw_file_perms;
') ')
# wlc
dontaudit shell sysfs_wlc:dir search;