diff options
| author | theimpulson <aayushgupta219@gmail.com> | 2019-11-15 03:52:14 +0000 |
|---|---|---|
| committer | theimpulson <aayushgupta219@gmail.com> | 2019-11-16 04:25:51 +0000 |
| commit | ccc533f6ab0747535ac6fdc958b6dffcf91b0ef0 (patch) | |
| tree | 17aa45c26b9012db0689485899db04ac2bcf0a3b | |
| parent | cfac4c9b88bc99303bdb82e2ce374e48381dd2c3 (diff) | |
| download | android_device_lineage_sepolicy-ccc533f6ab0747535ac6fdc958b6dffcf91b0ef0.tar.gz android_device_lineage_sepolicy-ccc533f6ab0747535ac6fdc958b6dffcf91b0ef0.tar.bz2 android_device_lineage_sepolicy-ccc533f6ab0747535ac6fdc958b6dffcf91b0ef0.zip | |
sepolicy: Label and address Trust's system variant denials
Change-Id: I33e3320da346e83b3c74e5631c20f556bd202c2b
| -rw-r--r-- | common/sepolicy.mk | 3 | ||||
| -rw-r--r-- | common/system/file_contexts | 2 | ||||
| -rw-r--r-- | common/system/hal_lineage_trust.te | 5 |
3 files changed, 9 insertions, 1 deletions
diff --git a/common/sepolicy.mk b/common/sepolicy.mk index 80aa4b2..86b6b15 100644 --- a/common/sepolicy.mk +++ b/common/sepolicy.mk @@ -17,7 +17,8 @@ BOARD_PLAT_PRIVATE_SEPOLICY_DIR += \ ifeq ($(TARGET_USES_PREBUILT_VENDOR_SEPOLICY), true) BOARD_PLAT_PRIVATE_SEPOLICY_DIR += \ - device/lineage/sepolicy/common/dynamic + device/lineage/sepolicy/common/dynamic \ + device/lineage/sepolicy/common/system else BOARD_SEPOLICY_DIRS += \ device/lineage/sepolicy/common/dynamic \ diff --git a/common/system/file_contexts b/common/system/file_contexts new file mode 100644 index 0000000..8fc1e77 --- /dev/null +++ b/common/system/file_contexts @@ -0,0 +1,2 @@ +# Trust +/system/bin/hw/lineage\.trust@1\.0-service u:object_r:hal_lineage_trust_default_exec:s0 diff --git a/common/system/hal_lineage_trust.te b/common/system/hal_lineage_trust.te new file mode 100644 index 0000000..9004f6c --- /dev/null +++ b/common/system/hal_lineage_trust.te @@ -0,0 +1,5 @@ +type hal_lineage_trust_default, coredomain, domain; +hal_server_domain(hal_lineage_trust_default, hal_lineage_trust) + +type hal_lineage_trust_default_exec, exec_type, system_file_type, file_type; +init_daemon_domain(hal_lineage_trust_default) |