Evolution-X-Tensor/device_google_gs201
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

hardwareinfo: add sepolicy for SoC

Browse source 
Bug: 208721710
Test: search avc in logcat

Change-Id: I3828d39981666db98e6a34aa70ae39b7f126e495
Signed-off-by: Denny cy Lee <dennycylee@google.com>
This commit is contained in:
Denny cy Lee 2022-01-25 16:21:32 +08:00 • committed by TreeHugger Robot
parent 362074c629
commit 92d0030e6a
4 changed files with 8 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
tracking_denials/hardware_info_app.te
View file

@ -1,4 +0,0 @@
# b/208721710
dontaudit hardware_info_app sysfs:file { getattr };
dontaudit hardware_info_app sysfs:file { open };
dontaudit hardware_info_app sysfs:file { read };

1
whitechapel_pro/file.te
View file

@ -43,6 +43,7 @@ type sysfs_chargelevel, sysfs_type, fs_type;
type sysfs_mfc, sysfs_type, fs_type;
type sysfs_cpu, sysfs_type, fs_type;
type sysfs_odpm, sysfs_type, fs_type;
type sysfs_soc, sysfs_type, fs_type;
# debugfs
type debugfs_f2fs, debugfs_type, fs_type;

3
whitechapel_pro/genfs_contexts
View file

@ -24,6 +24,9 @@ genfscon sysfs /devices/platform/17000080.devfreq_bo/devfreq/17000080.devfreq_bo
genfscon sysfs /devices/platform/28000000.mali/time_in_state u:object_r:sysfs_cpu:s0
genfscon sysfs /devices/platform/28000000.mali/uid_time_in_state u:object_r:sysfs_cpu:s0
genfscon sysfs /devices/soc0/machine u:object_r:sysfs_soc:s0
genfscon sysfs /devices/soc0/revision u:object_r:sysfs_soc:s0
# Touch
genfscon sysfs /devices/platform/10d10000.spi/spi_master/spi0/spi0.0/synaptics_tcm.0/sysfs u:object_r:sysfs_touch:s0
genfscon sysfs /devices/virtual/sec/tsp u:object_r:sysfs_touch:s0

4
whitechapel_pro/hardware_info_app.te
View file

@ -17,3 +17,7 @@ allow hardware_info_app sysfs_batteryinfo:file r_file_perms;
# Display
allow hardware_info_app sysfs_display:dir search;
allow hardware_info_app sysfs_display:file r_file_perms;
# SoC
allow hardware_info_app sysfs_soc:file r_file_perms;
allow hardware_info_app sysfs_chip_id:file r_file_perms;