Evolution-X-Tensor/device_google_gs201
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Revert "add sepolicy for set_usb_irq.sh" am: 3fdb24bdc1

Browse source 
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs201-sepolicy/+/17464004

Change-Id: I4933c6dc9dd7af1daace0f1bcaf97106ba4700d2
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Ray Chi 2022-03-30 05:00:33 +00:00 • committed by Automerger Merge Worker
commit 7fd923942a
2 changed files with 0 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

4
whitechapel_pro/file_contexts
View file

@ -220,9 +220,5 @@
/mnt/vendor/efs_backup(/.*)? u:object_r:modem_efs_file:s0
/mnt/vendor/modem_userdata(/.*)? u:object_r:modem_userdata_file:s0
# USB
/vendor/bin/hw/set_usb_irq\.sh u:object_r:set-usb-irq-sh_exec:s0
# Raw HID device
/dev/hidraw[0-9]* u:object_r:hidraw_device:s0

13
whitechapel_pro/set-usb-irq-sh.te
View file

@ -1,13 +0,0 @@
type set-usb-irq-sh, domain;
type set-usb-irq-sh_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(set-usb-irq-sh)
allow set-usb-irq-sh vendor_toolbox_exec:file execute_no_trans;
allow set-usb-irq-sh proc_irq:dir r_dir_perms;
allow set-usb-irq-sh proc_irq:file w_file_perms;
# AFAICT this happens if /proc/irq updates as we're running
# and we end up trying to write into non-existing file,
# which implies creation...
dontaudit set-usb-irq-sh self:capability dac_override;