isolate legacy sepolicy to start reviewing while letting others work

Bug: 254378739 Test: boot, camera, google map, play youtube Change-Id: If8ee7c64c0f7534a7e918f36a0e785b0ee9cd11f
2022-10-24 11:25:00 +08:00 · 2022-10-24 11:25:00 +08:00 · 9c81dc8d56
commit 9c81dc8d56
parent 522689438e
153 changed files with 19 additions and 247 deletions
--- a/legacy/private/permissioncontroller_app.te
+++ b/legacy/private/permissioncontroller_app.te
--- a/legacy/private/property_contexts
+++ b/legacy/private/property_contexts
--- a/legacy/private/radio.te
+++ b/legacy/private/radio.te
--- a/legacy/private/service_contexts
+++ b/legacy/private/service_contexts
--- a/legacy/system_ext/private/property_contexts
+++ b/legacy/system_ext/private/property_contexts
--- a/legacy/system_ext/public/property.te
+++ b/legacy/system_ext/public/property.te
--- a/legacy/whitechapel_pro/attributes
+++ b/legacy/whitechapel_pro/attributes
--- a/legacy/whitechapel_pro/audioserver.te
+++ b/legacy/whitechapel_pro/audioserver.te
--- a/legacy/whitechapel_pro/bipchmgr.te
+++ b/legacy/whitechapel_pro/bipchmgr.te
--- a/legacy/whitechapel_pro/bluetooth.te
+++ b/legacy/whitechapel_pro/bluetooth.te
--- a/legacy/whitechapel_pro/bootanim.te
+++ b/legacy/whitechapel_pro/bootanim.te
--- a/legacy/whitechapel_pro/bootdevice_sysdev.te
+++ b/legacy/whitechapel_pro/bootdevice_sysdev.te
--- a/legacy/whitechapel_pro/cat_engine_service_app.te
+++ b/legacy/whitechapel_pro/cat_engine_service_app.te
--- a/legacy/whitechapel_pro/cbd.te
+++ b/legacy/whitechapel_pro/cbd.te
--- a/legacy/whitechapel_pro/cbrs_setup.te
+++ b/legacy/whitechapel_pro/cbrs_setup.te
--- a/legacy/whitechapel_pro/cccdk_timesync_app.te
+++ b/legacy/whitechapel_pro/cccdk_timesync_app.te
--- a/legacy/whitechapel_pro/certs/EuiccSupportPixel.x509.pem
+++ b/legacy/whitechapel_pro/certs/EuiccSupportPixel.x509.pem
--- a/legacy/whitechapel_pro/certs/app.x509.pem
+++ b/legacy/whitechapel_pro/certs/app.x509.pem
--- a/legacy/whitechapel_pro/certs/com_google_mds.x509.pem
+++ b/legacy/whitechapel_pro/certs/com_google_mds.x509.pem
--- a/legacy/whitechapel_pro/certs/com_qorvo_uwb.x509.pem
+++ b/legacy/whitechapel_pro/certs/com_qorvo_uwb.x509.pem
--- a/legacy/whitechapel_pro/charger_vendor.te
+++ b/legacy/whitechapel_pro/charger_vendor.te
--- a/legacy/whitechapel_pro/chre.te
+++ b/legacy/whitechapel_pro/chre.te
--- a/legacy/whitechapel_pro/con_monitor.te
+++ b/legacy/whitechapel_pro/con_monitor.te
--- a/legacy/whitechapel_pro/device.te
+++ b/legacy/whitechapel_pro/device.te
--- a/legacy/whitechapel_pro/dmd.te
+++ b/legacy/whitechapel_pro/dmd.te
--- a/legacy/whitechapel_pro/domain.te
+++ b/legacy/whitechapel_pro/domain.te
--- a/legacy/whitechapel_pro/e2fs.te
+++ b/legacy/whitechapel_pro/e2fs.te
--- a/legacy/whitechapel_pro/euiccpixel_app.te
+++ b/legacy/whitechapel_pro/euiccpixel_app.te
--- a/legacy/whitechapel_pro/fastbootd.te
+++ b/legacy/whitechapel_pro/fastbootd.te
--- a/legacy/whitechapel_pro/file.te
+++ b/legacy/whitechapel_pro/file.te
--- a/legacy/whitechapel_pro/file_contexts
+++ b/legacy/whitechapel_pro/file_contexts
--- a/legacy/whitechapel_pro/fsck.te
+++ b/legacy/whitechapel_pro/fsck.te
--- a/legacy/whitechapel_pro/genfs_contexts
+++ b/legacy/whitechapel_pro/genfs_contexts
--- a/legacy/whitechapel_pro/google_camera_app.te
+++ b/legacy/whitechapel_pro/google_camera_app.te
--- a/legacy/whitechapel_pro/gpsd.te
+++ b/legacy/whitechapel_pro/gpsd.te
--- a/legacy/whitechapel_pro/grilservice_app.te
+++ b/legacy/whitechapel_pro/grilservice_app.te
--- a/legacy/whitechapel_pro/gxp_logging.te
+++ b/legacy/whitechapel_pro/gxp_logging.te
--- a/legacy/whitechapel_pro/hal_bootctl_default.te
+++ b/legacy/whitechapel_pro/hal_bootctl_default.te
--- a/legacy/whitechapel_pro/hal_camera_default.te
+++ b/legacy/whitechapel_pro/hal_camera_default.te
--- a/legacy/whitechapel_pro/hal_contexthub.te
+++ b/legacy/whitechapel_pro/hal_contexthub.te
--- a/legacy/whitechapel_pro/hal_fingerprint_default.te
+++ b/legacy/whitechapel_pro/hal_fingerprint_default.te
--- a/legacy/whitechapel_pro/hal_graphics_allocator_default.te
+++ b/legacy/whitechapel_pro/hal_graphics_allocator_default.te
--- a/legacy/whitechapel_pro/hal_graphics_composer_default.te
+++ b/legacy/whitechapel_pro/hal_graphics_composer_default.te
--- a/legacy/whitechapel_pro/hal_health_default.te
+++ b/legacy/whitechapel_pro/hal_health_default.te
--- a/legacy/whitechapel_pro/hal_health_storage_default.te
+++ b/legacy/whitechapel_pro/hal_health_storage_default.te
--- a/legacy/whitechapel_pro/hal_nfc_default.te
+++ b/legacy/whitechapel_pro/hal_nfc_default.te
--- a/legacy/whitechapel_pro/hal_power_default.te
+++ b/legacy/whitechapel_pro/hal_power_default.te
--- a/legacy/whitechapel_pro/hal_power_stats_default.te
+++ b/legacy/whitechapel_pro/hal_power_stats_default.te
--- a/legacy/whitechapel_pro/hal_radioext_default.te
+++ b/legacy/whitechapel_pro/hal_radioext_default.te
--- a/legacy/whitechapel_pro/hal_secure_element_gto.te
+++ b/legacy/whitechapel_pro/hal_secure_element_gto.te
--- a/legacy/whitechapel_pro/hal_secure_element_gto_ese2.te
+++ b/legacy/whitechapel_pro/hal_secure_element_gto_ese2.te
--- a/legacy/whitechapel_pro/hal_secure_element_st33spi.te
+++ b/legacy/whitechapel_pro/hal_secure_element_st33spi.te
--- a/legacy/whitechapel_pro/hal_secure_element_st54spi.te
+++ b/legacy/whitechapel_pro/hal_secure_element_st54spi.te
--- a/legacy/whitechapel_pro/hal_secure_element_uicc.te
+++ b/legacy/whitechapel_pro/hal_secure_element_uicc.te
--- a/legacy/whitechapel_pro/hal_sensors_default.te
+++ b/legacy/whitechapel_pro/hal_sensors_default.te
--- a/legacy/whitechapel_pro/hal_thermal_default.te
+++ b/legacy/whitechapel_pro/hal_thermal_default.te
--- a/legacy/whitechapel_pro/hal_usb_gadget_impl.te
+++ b/legacy/whitechapel_pro/hal_usb_gadget_impl.te
--- a/legacy/whitechapel_pro/hal_usb_impl.te
+++ b/legacy/whitechapel_pro/hal_usb_impl.te
--- a/legacy/whitechapel_pro/hal_uwb_vendor.te
+++ b/legacy/whitechapel_pro/hal_uwb_vendor.te
--- a/legacy/whitechapel_pro/hal_uwb_vendor_default.te
+++ b/legacy/whitechapel_pro/hal_uwb_vendor_default.te
--- a/legacy/whitechapel_pro/hal_wifi_ext.te
+++ b/legacy/whitechapel_pro/hal_wifi_ext.te
--- a/legacy/whitechapel_pro/hal_wlc.te
+++ b/legacy/whitechapel_pro/hal_wlc.te
--- a/legacy/whitechapel_pro/hbmsvmanager_app.te
+++ b/legacy/whitechapel_pro/hbmsvmanager_app.te
--- a/legacy/whitechapel_pro/hwservice.te
+++ b/legacy/whitechapel_pro/hwservice.te
--- a/legacy/whitechapel_pro/hwservice_contexts
+++ b/legacy/whitechapel_pro/hwservice_contexts
--- a/legacy/whitechapel_pro/hwservicemanager.te
+++ b/legacy/whitechapel_pro/hwservicemanager.te
--- a/legacy/whitechapel_pro/incident.te
+++ b/legacy/whitechapel_pro/incident.te
--- a/legacy/whitechapel_pro/init-display-sh.te
+++ b/legacy/whitechapel_pro/init-display-sh.te
--- a/legacy/whitechapel_pro/init.te
+++ b/legacy/whitechapel_pro/init.te
--- a/legacy/whitechapel_pro/init_radio.te
+++ b/legacy/whitechapel_pro/init_radio.te
--- a/legacy/whitechapel_pro/installd.te
+++ b/legacy/whitechapel_pro/installd.te
--- a/legacy/whitechapel_pro/kernel.te
+++ b/legacy/whitechapel_pro/kernel.te
--- a/legacy/whitechapel_pro/keys.conf
+++ b/legacy/whitechapel_pro/keys.conf
@ -0,0 +1,11 @@
 [@GOOGLE]
 ALL : device/google/zuma-sepolicy/legacy/whitechapel_pro/certs/app.x509.pem
 [@MDS]
 ALL : device/google/zuma-sepolicy/legacy/whitechapel_pro/certs/com_google_mds.x509.pem
 [@UWB]
 ALL : device/google/zuma-sepolicy/legacy/whitechapel_pro/certs/com_qorvo_uwb.x509.pem
 [@EUICCSUPPORTPIXEL]
 ALL : device/google/zuma-sepolicy/legacy/whitechapel_pro/certs/EuiccSupportPixel.x509.pem
--- a/legacy/whitechapel_pro/logd.te
+++ b/legacy/whitechapel_pro/logd.te
--- a/legacy/whitechapel_pro/logger_app.te
+++ b/legacy/whitechapel_pro/logger_app.te
--- a/legacy/whitechapel_pro/mac_permissions.xml
+++ b/legacy/whitechapel_pro/mac_permissions.xml
--- a/legacy/whitechapel_pro/mediacodec_google.te
+++ b/legacy/whitechapel_pro/mediacodec_google.te
--- a/legacy/whitechapel_pro/mediacodec_samsung.te
+++ b/legacy/whitechapel_pro/mediacodec_samsung.te
--- a/legacy/whitechapel_pro/modem_diagnostic_app.te
+++ b/legacy/whitechapel_pro/modem_diagnostic_app.te
--- a/legacy/whitechapel_pro/modem_logging_control.te
+++ b/legacy/whitechapel_pro/modem_logging_control.te
--- a/legacy/whitechapel_pro/modem_svc_sit.te
+++ b/legacy/whitechapel_pro/modem_svc_sit.te
--- a/legacy/whitechapel_pro/nfc.te
+++ b/legacy/whitechapel_pro/nfc.te
--- a/legacy/whitechapel_pro/oemrilservice_app.te
+++ b/legacy/whitechapel_pro/oemrilservice_app.te
--- a/legacy/whitechapel_pro/ofl_app.te
+++ b/legacy/whitechapel_pro/ofl_app.te
--- a/legacy/whitechapel_pro/omadm.te
+++ b/legacy/whitechapel_pro/omadm.te
--- a/legacy/whitechapel_pro/pixelstats_vendor.te
+++ b/legacy/whitechapel_pro/pixelstats_vendor.te
--- a/legacy/whitechapel_pro/platform_app.te
+++ b/legacy/whitechapel_pro/platform_app.te
--- a/legacy/whitechapel_pro/property.te
+++ b/legacy/whitechapel_pro/property.te
--- a/legacy/whitechapel_pro/property_contexts
+++ b/legacy/whitechapel_pro/property_contexts
--- a/legacy/whitechapel_pro/radio.te
+++ b/legacy/whitechapel_pro/radio.te
--- a/legacy/whitechapel_pro/ramdump_app.te
+++ b/legacy/whitechapel_pro/ramdump_app.te
--- a/legacy/whitechapel_pro/recovery.te
+++ b/legacy/whitechapel_pro/recovery.te
--- a/legacy/whitechapel_pro/rfsd.te
+++ b/legacy/whitechapel_pro/rfsd.te
--- a/legacy/whitechapel_pro/rild.te
+++ b/legacy/whitechapel_pro/rild.te
--- a/legacy/whitechapel_pro/rlsservice.te
+++ b/legacy/whitechapel_pro/rlsservice.te
--- a/legacy/whitechapel_pro/sced.te
+++ b/legacy/whitechapel_pro/sced.te
--- a/legacy/whitechapel_pro/seapp_contexts
+++ b/legacy/whitechapel_pro/seapp_contexts
--- a/legacy/whitechapel_pro/service.te
+++ b/legacy/whitechapel_pro/service.te
--- a/legacy/whitechapel_pro/service_contexts
+++ b/legacy/whitechapel_pro/service_contexts
--- a/legacy/whitechapel_pro/shell.te
+++ b/legacy/whitechapel_pro/shell.te
--- a/Show more
+++ b/Show more