Evolution-X-Tensor/device_google_zuma
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Branch zuma from gs201

Browse source 
Branch zuma from gs201 sha1 63751751aa91275b083797278d638078b3a0bf7a

cp/pantah/ripcurrent
cp/gs201/zuma

Bug: 229340586
Change-Id: Ie692d8dbbf0fc4d3b376dc9fe3e930bd3955a88e
Signed-off-by: Aaron Ding <aaronding@google.com>
This commit is contained in:
Aaron Ding 2022-04-15 13:18:52 +08:00
parent e4a3061192
commit e47b3d9991
199 changed files with 3343 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
dauntless/citadel_provision.te Normal file
View file

@ -0,0 +1,6 @@
type citadel_provision, domain;
type citadel_provision_exec, exec_type, vendor_file_type, file_type;
userdebug_or_eng(`
init_daemon_domain(citadel_provision)
')

13
dauntless/citadeld.te Normal file
View file

@ -0,0 +1,13 @@
type citadeld, domain;
type citadeld_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(citadeld)
add_service(citadeld, citadeld_service)
binder_use(citadeld)
vndbinder_use(citadeld)
binder_call(citadeld, system_server)
allow citadeld citadel_device:chr_file rw_file_perms;
allow citadeld fwk_stats_service:service_manager find;
allow citadeld hal_power_stats_vendor_service:service_manager find;

1
dauntless/device.te Normal file
View file

@ -0,0 +1 @@
type citadel_device, dev_type;

1
dauntless/file.te Normal file
View file

@ -0,0 +1 @@
type citadel_updater, vendor_file_type, file_type;

9
dauntless/file_contexts Normal file
View file

@ -0,0 +1,9 @@
/vendor/bin/CitadelProvision u:object_r:citadel_provision_exec:s0
/vendor/bin/hw/init_citadel u:object_r:init_citadel_exec:s0
/vendor/bin/hw/android\.hardware\.security\.keymint-service\.citadel u:object_r:hal_keymint_citadel_exec:s0
/vendor/bin/hw/android\.hardware\.weaver@1\.0-service\.citadel u:object_r:hal_weaver_citadel_exec:s0
/vendor/bin/hw/android\.hardware\.identity@1\.0-service\.citadel u:object_r:hal_identity_citadel_exec:s0
/vendor/bin/hw/citadel_updater u:object_r:citadel_updater:s0
/vendor/bin/hw/citadeld u:object_r:citadeld_exec:s0
/dev/gsc0 u:object_r:citadel_device:s0

11
dauntless/hal_identity_citadel.te Normal file
View file

@ -0,0 +1,11 @@
type hal_identity_citadel, domain;
type hal_identity_citadel_exec, exec_type, vendor_file_type, file_type;
vndbinder_use(hal_identity_citadel)
binder_call(hal_identity_citadel, citadeld)
allow hal_identity_citadel citadeld_service:service_manager find;
allow hal_identity_citadel hal_keymint_citadel:binder call;
hal_server_domain(hal_identity_citadel, hal_identity)
hal_server_domain(hal_identity_citadel, hal_keymint)
init_daemon_domain(hal_identity_citadel)

9
dauntless/hal_keymint_citadel.te Normal file
View file

@ -0,0 +1,9 @@
type hal_keymint_citadel, domain;
type hal_keymint_citadel_exec, exec_type, vendor_file_type, file_type;
hal_server_domain(hal_keymint_citadel, hal_keymint)
init_daemon_domain(hal_keymint_citadel)
vndbinder_use(hal_keymint_citadel)
get_prop(hal_keymint_citadel, vendor_security_patch_level_prop)
allow hal_keymint_citadel citadeld_service:service_manager find;
binder_call(hal_keymint_citadel, citadeld)

11
dauntless/hal_weaver_citadel.te Normal file
View file

@ -0,0 +1,11 @@
type hal_weaver_citadel, domain;
type hal_weaver_citadel_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_weaver_citadel)
hal_server_domain(hal_weaver_citadel, hal_weaver)
hal_server_domain(hal_weaver_citadel, hal_oemlock)
hal_server_domain(hal_weaver_citadel, hal_authsecret)
vndbinder_use(hal_weaver_citadel)
binder_call(hal_weaver_citadel, citadeld)
allow hal_weaver_citadel citadeld_service:service_manager find;

15
dauntless/init_citadel.te Normal file
View file

@ -0,0 +1,15 @@
type init_citadel, domain;
type init_citadel_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(init_citadel)
# Citadel communication must be via citadeld
vndbinder_use(init_citadel)
binder_call(init_citadel, citadeld)
allow init_citadel citadeld_service:service_manager find;
# Many standard utils are actually vendor_toolbox (like xxd)
allow init_citadel vendor_toolbox_exec:file rx_file_perms;
# init_citadel needs to invoke citadel_updater
allow init_citadel citadel_updater:file rx_file_perms;

3
dauntless/service_contexts Normal file
View file

@ -0,0 +1,3 @@
android.hardware.security.keymint.IKeyMintDevice/strongbox u:object_r:hal_keymint_service:s0
android.hardware.security.sharedsecret.ISharedSecret/strongbox u:object_r:hal_sharedsecret_service:s0
android.hardware.security.keymint.IRemotelyProvisionedComponent/strongbox u:object_r:hal_remotelyprovisionedcomponent_service:s0

1
dauntless/vndservice.te Normal file
View file

@ -0,0 +1 @@
type citadeld_service, vndservice_manager_type;

1
dauntless/vndservice_contexts Normal file
View file

@ -0,0 +1 @@
android.hardware.citadel.ICitadeld u:object_r:citadeld_service:s0