Move legacy file.te to vendor and tracking_denials

Bug: 312143882
Bug: 314035704
Test: make selinux_policy
Change-Id: Ibf5ac4c3e06bb2f5aab44e59073156181ab0b5a1
This commit is contained in:
Wilson Sung 2023-11-29 15:07:44 +00:00
parent ab0537780c
commit e531406f68
4 changed files with 69 additions and 78 deletions

55
vendor/file.te vendored
View file

@ -1,15 +1,70 @@
# persist
type persist_uwb_file, file_type, vendor_persist_type;
type persist_ss_file, file_type, vendor_persist_type;
type persist_display_file, file_type, vendor_persist_type;
type persist_battery_file, file_type, vendor_persist_type;
type persist_camera_file, file_type, vendor_persist_type;
type persist_fingerprint_file, file_type, vendor_persist_type;
#sysfs
type sysfs_pca, sysfs_type, fs_type;
type bootdevice_sysdev, dev_type;
type sysfs_wifi, sysfs_type, fs_type;
type sysfs_camera, sysfs_type, fs_type;
type sysfs_power_dump, sysfs_type, fs_type;
type sysfs_acpm_stats, sysfs_type, fs_type;
type sysfs_write_leds, sysfs_type, fs_type;
type sysfs_fabric, sysfs_type, fs_type;
type sysfs_em_profile, sysfs_type, fs_type;
type sysfs_ota, sysfs_type, fs_type;
type sysfs_ospm, sysfs_type, fs_type;
# debugfs
type vendor_regmap_debugfs, fs_type, debugfs_type;
type vendor_usb_debugfs, fs_type, debugfs_type;
type vendor_charger_debugfs, fs_type, debugfs_type;
type vendor_votable_debugfs, fs_type, debugfs_type;
type vendor_battery_debugfs, fs_type, debugfs_type;
type vendor_pm_genpd_debugfs, fs_type, debugfs_type;
type vendor_maxfg_debugfs, fs_type, debugfs_type;
# Data
type uwb_vendor_data_file, file_type, data_file_type, app_data_file_type;
type uwb_data_vendor, file_type, data_file_type;
type updated_wifi_firmware_data_file, file_type, data_file_type;
type vendor_misc_data_file, file_type, data_file_type;
type powerstats_vendor_data_file, file_type, data_file_type;
type chre_data_file, file_type, data_file_type;
type vendor_fingerprint_data_file, file_type, data_file_type;
# Storage Health HAL
type proc_f2fs, proc_type, fs_type;
# Vendor tools
type vendor_dumpsys, vendor_file_type, file_type;
# USB-C throttling stats
type sysfs_usbc_throttling_stats, sysfs_type, fs_type;
# Trusty
type sysfs_trusty, sysfs_type, fs_type;
# mount FS
allow bootdevice_sysdev sysfs:filesystem associate;
# WLC
type sysfs_wlc, sysfs_type, fs_type;
# CHRE
type chre_socket, file_type;
# BT
type vendor_bt_data_file, file_type, data_file_type;
# Vendor sched files
userdebug_or_eng(`
typeattribute proc_vendor_sched mlstrustedobject;
')
# GSA
type sysfs_gsa_log, sysfs_type, fs_type;