Update selinux-policy for ModemService.

Allowing the ModemService write access to the sysfs attribute
cp_temp which is used to update the thermal zones.

Test: Verified sysfs attribute security labels
Bug: 267485434
Change-Id: I8361e53f4e6aa82e6dc78e94af71ee26c06fb2f5
Signed-off-by: Mahesh Kallelil <kallelil@google.com>
This commit is contained in:
Mahesh Kallelil 2023-03-15 15:31:43 -07:00
parent 7c2b9b482e
commit df7ece2441
3 changed files with 7 additions and 0 deletions

View file

@ -18,6 +18,7 @@ type persist_modem_file, file_type, vendor_persist_type;
# Modem # Modem
type modem_efs_file, file_type; type modem_efs_file, file_type;
type modem_userdata_file, file_type; type modem_userdata_file, file_type;
type sysfs_modem, sysfs_type, fs_type;
# Exynos Firmware # Exynos Firmware
type vendor_fw_file, vendor_file_type, file_type; type vendor_fw_file, vendor_file_type, file_type;

View file

@ -6,3 +6,6 @@ genfscon sysfs /firmware/devicetree/base/chosen u:obje
# GPS # GPS
genfscon sysfs /devices/platform/111e0000.spi/spi_master/spi21/spi21.0/nstandby u:object_r:sysfs_gps:s0 genfscon sysfs /devices/platform/111e0000.spi/spi_master/spi21/spi21.0/nstandby u:object_r:sysfs_gps:s0
# Modem
genfscon sysfs /devices/platform/cp-tm1/cp_temp u:object_r:sysfs_modem:s0

View file

@ -5,6 +5,9 @@ init_daemon_domain(modem_svc_sit)
hwbinder_use(modem_svc_sit) hwbinder_use(modem_svc_sit)
binder_call(modem_svc_sit, rild) binder_call(modem_svc_sit, rild)
# Grant sysfs_modem access
allow modem_svc_sit sysfs_modem:file rw_file_perms;
# Grant radio device access # Grant radio device access
allow modem_svc_sit radio_device:chr_file rw_file_perms; allow modem_svc_sit radio_device:chr_file rw_file_perms;