Merge "Revert "Add necessary sepolicy for convert_modem_to_ext4"" into main

This commit is contained in:
Pechetty Sravani 2024-05-07 13:08:44 +00:00 committed by Android (Google) Code Review
commit 7c7e028271
4 changed files with 0 additions and 43 deletions

View file

@ -1,37 +0,0 @@
type copy_efs_files_to_data, domain;
type copy_efs_files_to_data_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(copy_efs_files_to_data);
# Allow creating files on /data/vendor/copied
allow copy_efs_files_to_data modem_efs_image_file:dir { create_dir_perms };
allow copy_efs_files_to_data modem_efs_image_file:file { create_file_perms };
allow copy_efs_files_to_data modem_efs_image_file:lnk_file { create_file_perms };
# Allow execute binaries from /vendor/bin
allow copy_efs_files_to_data vendor_toolbox_exec:file rx_file_perms;
allow copy_efs_files_to_data vendor_shell_exec:file rx_file_perms;
allow copy_efs_files_to_data mnt_vendor_file:dir { r_dir_perms setattr };
allow copy_efs_files_to_data kmsg_debug_device:chr_file { w_file_perms ioctl getattr };
# For reading files on /mnt/vendor/persist
allow copy_efs_files_to_data vendor_persist_type:dir { r_dir_perms setattr };
allow copy_efs_files_to_data vendor_persist_type:file { r_file_perms setattr };
allow copy_efs_files_to_data tee_data_file:lnk_file r_file_perms;
# For reading files on /mnt/vendor/efs
allow copy_efs_files_to_data modem_efs_file:dir { r_dir_perms setattr };
allow copy_efs_files_to_data modem_efs_file:file { r_file_perms setattr };
# For reading files on /mnt/vendor/modem_userdata
allow copy_efs_files_to_data modem_userdata_file:dir { r_dir_perms setattr };
allow copy_efs_files_to_data modem_userdata_file:file { r_file_perms setattr };
# Allow changing permission of files on /data/vendor/copied, part of cp -rp
allow copy_efs_files_to_data self:capability { fowner chown };

View file

@ -1,6 +1,5 @@
# Data
type rild_vendor_data_file, file_type, data_file_type;
type modem_efs_image_file, file_type, data_file_type;
type vendor_gps_file, file_type, data_file_type;
type modem_ml_data_file, file_type, data_file_type;
type modem_stat_data_file, file_type, data_file_type;

View file

@ -12,7 +12,6 @@
/vendor/bin/hw/rild_exynos u:object_r:rild_exec:s0
/vendor/bin/hw/vendor\.google\.radioext@1\.0-service u:object_r:hal_radioext_default_exec:s0
/vendor/bin/liboemservice_proxy_default u:object_r:liboemservice_proxy_default_exec:s0
/vendor/bin/copy_efs_files_to_data u:object_r:copy_efs_files_to_data_exec:s0
# Config files
/vendor/etc/modem_ml_models\.conf u:object_r:modem_config_file:s0
@ -24,7 +23,6 @@
/data/vendor/modem_ml(/.*)? u:object_r:modem_ml_data_file:s0
/data/vendor/modem_stat(/.*)? u:object_r:modem_stat_data_file:s0
/data/vendor/rild(/.*)? u:object_r:rild_vendor_data_file:s0
/data/vendor/copied(/.*)? u:object_r:modem_efs_image_file:s0
# vendor extra images
/mnt/vendor/efs(/.*)? u:object_r:modem_efs_file:s0

View file

@ -38,6 +38,3 @@ allow vendor_init proc_watermark_scale_factor:file w_file_perms;
# Allow vendor_init to read ro.vendor.persist.status
# to process init.rc actions
set_prop(vendor_init, vendor_persist_prop)
# Allow vendor_init to read ro.product.build.16k_page.enabled
# to process init.rc actions
get_prop(vendor_init, enable_16k_pages_prop)