diff options
| author | Linux Build Service Account <lnxbuild@localhost> | 2015-12-30 03:20:49 -0800 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2015-12-30 03:20:49 -0800 |
| commit | f43b8e744992696880c3687d3d93d93147946bdb (patch) | |
| tree | b643fcf46997863efc47889d2c74c3c1bb6a7abc | |
| parent | 87ccb2f22022c4fd37850fb078c7521595fcce32 (diff) | |
| parent | 8ad228d8eca3a89d0755291fe0a8c7a8d6342f75 (diff) | |
| download | android_device_qcom_sepolicy-f43b8e744992696880c3687d3d93d93147946bdb.tar.gz android_device_qcom_sepolicy-f43b8e744992696880c3687d3d93d93147946bdb.tar.bz2 android_device_qcom_sepolicy-f43b8e744992696880c3687d3d93d93147946bdb.zip | |
Merge ""sepolicy:common: QFP daemon read permissions to qc_senseid""
| -rw-r--r-- | common/file.te | 1 | ||||
| -rw-r--r-- | common/file_contexts | 1 | ||||
| -rw-r--r-- | common/qfp-daemon.te | 4 | ||||
| -rw-r--r-- | common/qseecomd.te | 2 |
4 files changed, 8 insertions, 0 deletions
diff --git a/common/file.te b/common/file.te index b3b2885c..c1c59541 100644 --- a/common/file.te +++ b/common/file.te @@ -146,6 +146,7 @@ type persist_usf_file, file_type; #qfp-daemon type qfp-daemon_data_file, file_type, data_file_type; +type persist_qc_senseid_file, file_type; # dts notifier files type dts_data_file, file_type, data_file_type; diff --git a/common/file_contexts b/common/file_contexts index 35605fc7..3ef0204f 100644 --- a/common/file_contexts +++ b/common/file_contexts @@ -312,6 +312,7 @@ /persist/data(/.*)? u:object_r:persist_drm_file:s0 /persist/data/tz(/.*)? u:object_r:persist_drm_file:s0 /persist/data/sfs(/.*)? u:object_r:persist_drm_file:s0 +/persist/qc_senseid(/.*)? u:object_r:persist_qc_senseid_file:s0 /persist/usf(/.*)? u:object_r:persist_usf_file:s0 /persist/hlos_rfs(/.*)? u:object_r:rfs_shared_hlos_file:s0 /persist/display(/.*)? u:object_r:persist_display_file:s0 diff --git a/common/qfp-daemon.te b/common/qfp-daemon.te index 5d2d7a4b..b154c54d 100644 --- a/common/qfp-daemon.te +++ b/common/qfp-daemon.te @@ -55,6 +55,10 @@ allow qfp-daemon qbt1000_device:chr_file rw_file_perms; # R dir perms for firmware dir r_dir_file(qfp-daemon, firmware_file) +# R dir perms for persist qc_senseid dir +r_dir_file(qfp-daemon, persist_file) +r_dir_file(qfp-daemon, persist_qc_senseid_file) + # Allow qfp daemon access to system server binder_call(qfp-daemon, system_server); diff --git a/common/qseecomd.te b/common/qseecomd.te index f97849d6..0c077ea1 100644 --- a/common/qseecomd.te +++ b/common/qseecomd.te @@ -70,6 +70,8 @@ allow tee system_prop:property_service set; #allow access to qfp-daemon allow tee qfp-daemon_data_file:dir create_dir_perms; allow tee qfp-daemon_data_file:file create_file_perms; +allow tee persist_qc_senseid_file:dir create_dir_perms; +allow tee persist_qc_senseid_file:file create_file_perms; #allow access to fingerprintd data file allow tee fingerprintd_data_file:dir create_dir_perms; |