Merge "use gs-common insert module script"

This commit is contained in:
Adam Shih 2022-09-12 05:40:56 +00:00 committed by Android (Google) Code Review
commit 4c3622d25a
5 changed files with 11 additions and 32 deletions

View file

@ -11,7 +11,7 @@
/vendor/bin/storageproxyd u:object_r:tee_exec:s0
/vendor/bin/init\.radio\.sh u:object_r:init_radio_exec:s0
/vendor/bin/tcpdump_logger u:object_r:tcpdump_logger_exec:s0
/vendor/bin/init\.insmod\.sh u:object_r:init-insmod-sh_exec:s0
/vendor/bin/init\.display\.sh u:object_r:init-display-sh_exec:s0
/vendor/bin/trusty_apploader u:object_r:trusty_apploader_exec:s0
/vendor/bin/trusty_metricsd u:object_r:trusty_metricsd_exec:s0
/vendor/bin/usf_stats u:object_r:vendor_usf_stats:s0
@ -64,9 +64,6 @@
/vendor/lib(64)?/hw/vulkan\.mali\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libgpudataproducer\.so u:object_r:same_process_hal_file:s0
# Vendor kernel modules
/vendor_dlkm/lib/modules/.*\.ko u:object_r:vendor_kernel_modules:s0
# Devices
/dev/trusty-log0 u:object_r:logbuffer_device:s0
/dev/dma_heap/sensor_direct_heap u:object_r:sensor_direct_heap_device:s0

View file

@ -0,0 +1,10 @@
type init-display-sh, domain;
type init-display-sh_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(init-display-sh)
allow init-display-sh self:capability sys_module;
allow init-display-sh vendor_kernel_modules:system module_load;
allow init-display-sh vendor_toolbox_exec:file execute_no_trans;
dontaudit init-display-sh proc_cmdline:file r_file_perms;

View file

@ -1,18 +0,0 @@
type init-insmod-sh, domain;
type init-insmod-sh_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(init-insmod-sh)
allow init-insmod-sh self:capability sys_module;
allow init-insmod-sh vendor_kernel_modules:system module_load;
allow init-insmod-sh vendor_toolbox_exec:file execute_no_trans;
allow init-insmod-sh self:capability sys_nice;
allow init-insmod-sh kernel:process setsched;
set_prop(init-insmod-sh, vendor_device_prop)
set_prop(init-insmod-sh, vendor_ready_prop)
dontaudit init-insmod-sh proc_cmdline:file r_file_perms;
allow init-insmod-sh debugfs_mgm:dir search;
allow init-insmod-sh vendor_regmap_debugfs:dir search;

View file

@ -17,8 +17,6 @@ vendor_internal_prop(vendor_camera_debug_prop)
vendor_internal_prop(vendor_camera_fatp_prop)
vendor_internal_prop(vendor_usb_config_prop)
vendor_internal_prop(vendor_tcpdump_log_prop)
vendor_internal_prop(vendor_device_prop)
vendor_internal_prop(vendor_ready_prop)
vendor_internal_prop(vendor_gps_prop)
vendor_internal_prop(vendor_ro_sys_default_prop)
vendor_internal_prop(vendor_persist_sys_default_prop)

View file

@ -4,14 +4,6 @@ persist.vendor.sys.diag. u:object_r:vendor_diag_prop:s0
vendor.sys.dmd. u:object_r:vendor_diag_prop:s0
vendor.sys.diag. u:object_r:vendor_diag_prop:s0
# Kernel modules related
vendor.common.modules.ready u:object_r:vendor_device_prop:s0
vendor.device.modules.ready u:object_r:vendor_device_prop:s0
# Indicating signal that all modules and devices are ready
vendor.all.modules.ready u:object_r:vendor_ready_prop:s0
vendor.all.devices.ready u:object_r:vendor_ready_prop:s0
# Tcpdump_logger
persist.vendor.tcpdump.log.alwayson u:object_r:vendor_tcpdump_log_prop:s0
vendor.tcpdump. u:object_r:vendor_tcpdump_log_prop:s0