Add 'sepolicy/' from tag 'android-15.0.0_r1'

git-subtree-dir: sepolicy
git-subtree-mainline: 78520e7ad8
git-subtree-split: f893c39d0d
Change-Id: I8a6cf4e385bf9b9a229f56a95fc4a41ec3fe4f82
This commit is contained in:
Michael Bestas 2024-10-07 16:03:07 +03:00
commit d2fdd8bb9f
No known key found for this signature in database
GPG key ID: CC95044519BE6669
18 changed files with 71 additions and 0 deletions

4
sepolicy/OWNERS Normal file
View file

@ -0,0 +1,4 @@
include device/google/gs-common:/sepolicy/OWNERS
adamshih@google.com

View file

@ -0,0 +1,5 @@
# sepolicy exclusively for husky.
BOARD_SEPOLICY_DIRS += device/google/shusky-sepolicy/husky
# unresolved SELinux error log with bug tracking
BOARD_SEPOLICY_DIRS += device/google/shusky-sepolicy/tracking_denials

View file

@ -0,0 +1,2 @@
This folder holds sepolicy exclusively for one device. For example, genfs_contexts
paths that are affected by device tree.

View file

@ -0,0 +1,4 @@
# Bluetooth
/dev/ttySAC18 u:object_r:hci_attach_dev:s0
/dev/logbuffer_btlpm u:object_r:logbuffer_device:s0
/dev/logbuffer_tty18 u:object_r:logbuffer_device:s0

View file

@ -0,0 +1,8 @@
# Haptics
genfscon sysfs /devices/platform/10c80000.hsi2c/i2c-0/0-0043 u:object_r:sysfs_vibrator:s0
# WLC
genfscon sysfs /devices/platform/10c90000.hsi2c/i2c-9/9-003c u:object_r:sysfs_wlc:s0
# GPS
genfscon sysfs /devices/platform/111e0000.spi/spi_master/spi21/spi21.0/nstandby u:object_r:sysfs_gps:s0

1
sepolicy/husky/radio.te Normal file
View file

@ -0,0 +1 @@
allow radio scheduling_policy_service:service_manager find;

View file

@ -0,0 +1,2 @@
# Display
set_prop(vendor_init, vendor_display_prop)

View file

@ -0,0 +1,3 @@
# sepolicy that are shared among devices using whitechapel
BOARD_SEPOLICY_DIRS += device/google/shusky-sepolicy/ripcurrent

View file

@ -0,0 +1,2 @@
This folder holds sepolicy exclusively for one device. For example, genfs_contexts
paths that are affected by device tree.

View file

@ -0,0 +1,4 @@
# Bluetooth
/dev/ttySAC18 u:object_r:hci_attach_dev:s0
/dev/logbuffer_btlpm u:object_r:logbuffer_device:s0
/dev/logbuffer_tty18 u:object_r:logbuffer_device:s0

View file

@ -0,0 +1,10 @@
# Haptics
genfscon sysfs /devices/platform/10c80000.hsi2c/i2c-0/0-0042 u:object_r:sysfs_vibrator:s0
genfscon sysfs /devices/platform/10c80000.hsi2c/i2c-0/0-0043 u:object_r:sysfs_vibrator:s0
# WLC
genfscon sysfs /devices/platform/10c90000.hsi2c/i2c-9/9-003c u:object_r:sysfs_wlc:s0
genfscon sysfs /devices/platform/10c90000.hsi2c/i2c-9/9-003b u:object_r:sysfs_wlc:s0
# GPS
genfscon sysfs /devices/platform/111e0000.spi/spi_master/spi21/spi21.0/nstandby u:object_r:sysfs_gps:s0

View file

@ -0,0 +1,5 @@
# sepolicy exclusively for shiba.
BOARD_SEPOLICY_DIRS += device/google/shusky-sepolicy/shiba
# unresolved SELinux error log with bug tracking
BOARD_SEPOLICY_DIRS += device/google/shusky-sepolicy/tracking_denials

View file

@ -0,0 +1,2 @@
This folder holds sepolicy exclusively for one device. For example, genfs_contexts
paths that are affected by device tree.

View file

@ -0,0 +1,4 @@
# Bluetooth
/dev/ttySAC18 u:object_r:hci_attach_dev:s0
/dev/logbuffer_btlpm u:object_r:logbuffer_device:s0
/dev/logbuffer_tty18 u:object_r:logbuffer_device:s0

View file

@ -0,0 +1,8 @@
# Haptics
genfscon sysfs /devices/platform/10c80000.hsi2c/i2c-0/0-0043 u:object_r:sysfs_vibrator:s0
# WLC
genfscon sysfs /devices/platform/10c90000.hsi2c/i2c-9/9-003c u:object_r:sysfs_wlc:s0
# GPS
genfscon sysfs /devices/platform/111e0000.spi/spi_master/spi21/spi21.0/nstandby u:object_r:sysfs_gps:s0

1
sepolicy/shiba/radio.te Normal file
View file

@ -0,0 +1 @@
allow radio scheduling_policy_service:service_manager find;

View file

@ -0,0 +1,2 @@
# b/301300623
typeattribute sysfs_touch_gti mlstrustedobject;

View file

@ -0,0 +1,4 @@
# b/301300623
allow priv_app app_api_service:service_manager find;
allow priv_app sysfs_touch_gti:file rw_file_perms;
allow priv_app sysfs_touch_gti:file { getattr open read write };