sm8350-common: sepolicy: Attach vendor_property_type to properties
We are going to enforce that each property has an explicit owner, such as system, vendor, or product. This attaches vendor_property_type to properties defined under vendor sepolicy directories. Bug: 159097992 Test: m selinux_policy && boot device Change-Id: Ibed833cd9e5d786e82985ded6bc62abdf8cd9ded
This commit is contained in:
parent
d434f19804
commit
60afa5a8fb
2
sepolicy/vendor/hal_camera_default.te
vendored
2
sepolicy/vendor/hal_camera_default.te
vendored
@ -1,5 +1,5 @@
|
|||||||
type vendor_camera_sensor_prop, property_type;
|
|
||||||
type camera_persist_file, vendor_persist_type, file_type;
|
type camera_persist_file, vendor_persist_type, file_type;
|
||||||
|
vendor_internal_prop(vendor_camera_sensor_prop)
|
||||||
|
|
||||||
set_prop(hal_camera_default, vendor_camera_sensor_prop)
|
set_prop(hal_camera_default, vendor_camera_sensor_prop)
|
||||||
r_dir_file(hal_camera_default, camera_persist_file)
|
r_dir_file(hal_camera_default, camera_persist_file)
|
||||||
|
4
sepolicy/vendor/hal_fingerprint_default.te
vendored
4
sepolicy/vendor/hal_fingerprint_default.te
vendored
@ -1,8 +1,8 @@
|
|||||||
type vendor_fingerprint_data_file, data_file_type, file_type;
|
type vendor_fingerprint_data_file, data_file_type, file_type;
|
||||||
type vendor_fingerprint_device, dev_type;
|
type vendor_fingerprint_device, dev_type;
|
||||||
type vendor_fp_prop, vendor_public_property_type, vendor_property_type, property_type;
|
|
||||||
type vendor_fp_info_prop, vendor_public_property_type, vendor_property_type, property_type;
|
|
||||||
type vendor_hal_fingerprint_hwservice_xiaomi, hwservice_manager_type;
|
type vendor_hal_fingerprint_hwservice_xiaomi, hwservice_manager_type;
|
||||||
|
vendor_internal_prop(vendor_fp_prop)
|
||||||
|
vendor_internal_prop(vendor_fp_info_prop)
|
||||||
|
|
||||||
# Binder
|
# Binder
|
||||||
allow hal_fingerprint_default vendor_hal_fingerprint_hwservice_xiaomi:hwservice_manager find;
|
allow hal_fingerprint_default vendor_hal_fingerprint_hwservice_xiaomi:hwservice_manager find;
|
||||||
|
2
sepolicy/vendor/hal_mlipay.te
vendored
2
sepolicy/vendor/hal_mlipay.te
vendored
@ -6,7 +6,7 @@ hal_server_domain(hal_mlipay_default, hal_mlipay)
|
|||||||
type hal_mlipay_default_exec, exec_type, vendor_file_type, file_type;
|
type hal_mlipay_default_exec, exec_type, vendor_file_type, file_type;
|
||||||
init_daemon_domain(hal_mlipay_default)
|
init_daemon_domain(hal_mlipay_default)
|
||||||
|
|
||||||
type vendor_mlipay_prop, property_type;
|
vendor_public_prop(vendor_mlipay_prop)
|
||||||
|
|
||||||
# Allow hwbinder call from hal client to server
|
# Allow hwbinder call from hal client to server
|
||||||
binder_call(hal_mlipay_client, hal_mlipay_server)
|
binder_call(hal_mlipay_client, hal_mlipay_server)
|
||||||
|
Loading…
Reference in New Issue
Block a user