device_google_zuma/vendor/vendor_init.te
Kelvin Zhang c1341de4c3 Add necessary sepolicy for ro.vendor.persist.status
This prop will be set to "mounted" after /mnt/vendor/persist mounts.
Need this prop to synchronize different actions in init.rc script.

Test: th
Bug: 319335586
Change-Id: I9e8bd5e875956393d610b7def6be713565543d05
2024-04-22 10:14:12 -07:00

40 lines
1.1 KiB
Text

# Fingerprint property
set_prop(vendor_init, vendor_fingerprint_prop)
# Battery harness mode property
set_prop(vendor_init, vendor_battery_defender_prop)
set_prop(vendor_init, logpersistd_logging_prop)
allow vendor_init proc_dirty:file w_file_perms;
allow vendor_init proc_sched:file w_file_perms;
allow vendor_init bootdevice_sysdev:file create_file_perms;
allow vendor_init modem_img_file:filesystem { getattr };
# Allow for checking NSP permissions
allow vendor_init tee_data_file:lnk_file read;
userdebug_or_eng(`
allow vendor_init vendor_init:lockdown { integrity };
')
# Camera vendor property
set_prop(vendor_init, vendor_camera_prop)
# NFC vendor property
set_prop(vendor_init, vendor_nfc_prop)
# SecureElement vendor property
set_prop(vendor_init, vendor_secure_element_prop)
# USB property
set_prop(vendor_init, vendor_usb_config_prop)
# Mali
set_prop(vendor_init, vendor_arm_runtime_option_prop)
set_prop(vendor_init, vendor_ssrdump_prop)
# MM
allow vendor_init proc_watermark_scale_factor:file w_file_perms;
# Allow vendor_init to read ro.vendor.persist.status
# to process init.rc actions
set_prop(vendor_init, vendor_persist_prop)