From 045f994310644fcbeadcc787d75e4179041e25cc Mon Sep 17 00:00:00 2001 From: Ken Yang Date: Fri, 16 Dec 2022 05:54:32 +0000 Subject: [PATCH 1/3] WLC: Add device specific sepolicy for wireless_charger Bug: 237600973 Change-Id: Icbe5ed0d69c5fd1cf1eb248388324dd5ca59d40a Signed-off-by: Ken Yang --- cheetah/platform_app.te | 2 ++ cheetah/system_app.te | 2 ++ cloudripper/platform_app.te | 2 ++ cloudripper/system_app.te | 2 ++ panther/platform_app.te | 2 ++ panther/system_app.te | 2 ++ 6 files changed, 12 insertions(+) create mode 100644 cheetah/platform_app.te create mode 100644 cheetah/system_app.te create mode 100644 cloudripper/platform_app.te create mode 100644 cloudripper/system_app.te create mode 100644 panther/platform_app.te create mode 100644 panther/system_app.te diff --git a/cheetah/platform_app.te b/cheetah/platform_app.te new file mode 100644 index 0000000..6ac0514 --- /dev/null +++ b/cheetah/platform_app.te @@ -0,0 +1,2 @@ +allow platform_app hal_wireless_charger_service:service_manager find; +binder_call(platform_app, hal_wireless_charger) diff --git a/cheetah/system_app.te b/cheetah/system_app.te new file mode 100644 index 0000000..ca56668 --- /dev/null +++ b/cheetah/system_app.te @@ -0,0 +1,2 @@ +allow system_app hal_wireless_charger_service:service_manager find; +binder_call(system_app, hal_wireless_charger) diff --git a/cloudripper/platform_app.te b/cloudripper/platform_app.te new file mode 100644 index 0000000..6ac0514 --- /dev/null +++ b/cloudripper/platform_app.te @@ -0,0 +1,2 @@ +allow platform_app hal_wireless_charger_service:service_manager find; +binder_call(platform_app, hal_wireless_charger) diff --git a/cloudripper/system_app.te b/cloudripper/system_app.te new file mode 100644 index 0000000..ca56668 --- /dev/null +++ b/cloudripper/system_app.te @@ -0,0 +1,2 @@ +allow system_app hal_wireless_charger_service:service_manager find; +binder_call(system_app, hal_wireless_charger) diff --git a/panther/platform_app.te b/panther/platform_app.te new file mode 100644 index 0000000..6ac0514 --- /dev/null +++ b/panther/platform_app.te @@ -0,0 +1,2 @@ +allow platform_app hal_wireless_charger_service:service_manager find; +binder_call(platform_app, hal_wireless_charger) diff --git a/panther/system_app.te b/panther/system_app.te new file mode 100644 index 0000000..ca56668 --- /dev/null +++ b/panther/system_app.te @@ -0,0 +1,2 @@ +allow system_app hal_wireless_charger_service:service_manager find; +binder_call(system_app, hal_wireless_charger) From 55a1f53c536c3b51c6087af29ac35c064b0dd124 Mon Sep 17 00:00:00 2001 From: Ken Yang Date: Thu, 5 Jan 2023 08:21:57 +0000 Subject: [PATCH 2/3] WLC: Add device specific policies Bug: 263830018 Change-Id: Ic227863937b759a588cd969711dc59c17ab4627c Signed-off-by: Ken Yang --- cheetah/genfs_contexts | 12 ++++++++++++ cloudripper/genfs_contexts | 12 ++++++++++++ panther/genfs_contexts | 12 ++++++++++++ 3 files changed, 36 insertions(+) diff --git a/cheetah/genfs_contexts b/cheetah/genfs_contexts index caf2581..e6617c8 100644 --- a/cheetah/genfs_contexts +++ b/cheetah/genfs_contexts @@ -1,2 +1,14 @@ # Haptics genfscon sysfs /devices/platform/10970000.hsi2c/i2c-4/i2c-cs40l26a u:object_r:sysfs_vibrator:s0 + +# WLC +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-0/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-1/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-2/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-3/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-4/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-5/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-6/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-7/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-8/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-9/i2c-p9412 u:object_r:sysfs_wlc:s0 diff --git a/cloudripper/genfs_contexts b/cloudripper/genfs_contexts index 11e438e..969c4ca 100644 --- a/cloudripper/genfs_contexts +++ b/cloudripper/genfs_contexts @@ -1,3 +1,15 @@ # Haptics genfscon sysfs /devices/platform/10970000.hsi2c/i2c-4/i2c-cs40l26a u:object_r:sysfs_vibrator:s0 genfscon sysfs /devices/platform/10970000.hsi2c/i2c-4/i2c-cs40l26a-dual u:object_r:sysfs_vibrator:s0 + +# WLC +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-0/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-1/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-2/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-3/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-4/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-5/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-6/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-7/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-8/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-9/i2c-p9412 u:object_r:sysfs_wlc:s0 diff --git a/panther/genfs_contexts b/panther/genfs_contexts index caf2581..e6617c8 100644 --- a/panther/genfs_contexts +++ b/panther/genfs_contexts @@ -1,2 +1,14 @@ # Haptics genfscon sysfs /devices/platform/10970000.hsi2c/i2c-4/i2c-cs40l26a u:object_r:sysfs_vibrator:s0 + +# WLC +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-0/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-1/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-2/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-3/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-4/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-5/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-6/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-7/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-8/i2c-p9412 u:object_r:sysfs_wlc:s0 +genfscon sysfs /devices/platform/10da0000.hsi2c/i2c-9/i2c-p9412 u:object_r:sysfs_wlc:s0 From eac03bf7eead718129b6c5f32906571d6f3cb590 Mon Sep 17 00:00:00 2001 From: Ken Yang Date: Fri, 6 Jan 2023 19:31:54 +0000 Subject: [PATCH 3/3] WLC: Cleanup the sysfs_wlc policies The sepolicy must be self-contained without including wirelss_charger to avoid build break in AOSP Bug: 263830018 Change-Id: Id8303f8d2f2fb5afaa1a3c6355a285fd0a16c304 Signed-off-by: Ken Yang --- cheetah/platform_app.te | 2 -- cheetah/system_app.te | 2 -- cloudripper/platform_app.te | 2 -- cloudripper/system_app.te | 2 -- panther/platform_app.te | 2 -- panther/system_app.te | 2 -- 6 files changed, 12 deletions(-) delete mode 100644 cheetah/platform_app.te delete mode 100644 cheetah/system_app.te delete mode 100644 cloudripper/platform_app.te delete mode 100644 cloudripper/system_app.te delete mode 100644 panther/platform_app.te delete mode 100644 panther/system_app.te diff --git a/cheetah/platform_app.te b/cheetah/platform_app.te deleted file mode 100644 index 6ac0514..0000000 --- a/cheetah/platform_app.te +++ /dev/null @@ -1,2 +0,0 @@ -allow platform_app hal_wireless_charger_service:service_manager find; -binder_call(platform_app, hal_wireless_charger) diff --git a/cheetah/system_app.te b/cheetah/system_app.te deleted file mode 100644 index ca56668..0000000 --- a/cheetah/system_app.te +++ /dev/null @@ -1,2 +0,0 @@ -allow system_app hal_wireless_charger_service:service_manager find; -binder_call(system_app, hal_wireless_charger) diff --git a/cloudripper/platform_app.te b/cloudripper/platform_app.te deleted file mode 100644 index 6ac0514..0000000 --- a/cloudripper/platform_app.te +++ /dev/null @@ -1,2 +0,0 @@ -allow platform_app hal_wireless_charger_service:service_manager find; -binder_call(platform_app, hal_wireless_charger) diff --git a/cloudripper/system_app.te b/cloudripper/system_app.te deleted file mode 100644 index ca56668..0000000 --- a/cloudripper/system_app.te +++ /dev/null @@ -1,2 +0,0 @@ -allow system_app hal_wireless_charger_service:service_manager find; -binder_call(system_app, hal_wireless_charger) diff --git a/panther/platform_app.te b/panther/platform_app.te deleted file mode 100644 index 6ac0514..0000000 --- a/panther/platform_app.te +++ /dev/null @@ -1,2 +0,0 @@ -allow platform_app hal_wireless_charger_service:service_manager find; -binder_call(platform_app, hal_wireless_charger) diff --git a/panther/system_app.te b/panther/system_app.te deleted file mode 100644 index ca56668..0000000 --- a/panther/system_app.te +++ /dev/null @@ -1,2 +0,0 @@ -allow system_app hal_wireless_charger_service:service_manager find; -binder_call(system_app, hal_wireless_charger)