diff options
| author | theimpulson <aayushgupta219@gmail.com> | 2019-11-15 03:45:40 +0000 |
|---|---|---|
| committer | theimpulson <aayushgupta219@gmail.com> | 2019-11-16 04:23:35 +0000 |
| commit | cfac4c9b88bc99303bdb82e2ce374e48381dd2c3 (patch) | |
| tree | f1715d616bfa5b960b46940bd65256bb0b6d84d0 | |
| parent | 8ca697b6c2d7145b71cebfc311185d2d14455723 (diff) | |
| download | android_device_lineage_sepolicy-cfac4c9b88bc99303bdb82e2ce374e48381dd2c3.tar.gz android_device_lineage_sepolicy-cfac4c9b88bc99303bdb82e2ce374e48381dd2c3.tar.bz2 android_device_lineage_sepolicy-cfac4c9b88bc99303bdb82e2ce374e48381dd2c3.zip | |
sepolicy: Label and address denials of livedisplay's system variant
Change-Id: Ib7bf75607c46239cc7eee0785a548e7defbebada
| -rw-r--r-- | qcom/sepolicy.mk | 3 | ||||
| -rw-r--r-- | qcom/system/file_contexts | 2 | ||||
| -rw-r--r-- | qcom/system/hal_lineage_livedisplay_qti.te | 12 |
3 files changed, 16 insertions, 1 deletions
diff --git a/qcom/sepolicy.mk b/qcom/sepolicy.mk index 9d526f2..4d84179 100644 --- a/qcom/sepolicy.mk +++ b/qcom/sepolicy.mk @@ -14,7 +14,8 @@ BOARD_PLAT_PRIVATE_SEPOLICY_DIR += \ ifeq ($(TARGET_USES_PREBUILT_VENDOR_SEPOLICY), true) BOARD_PLAT_PRIVATE_SEPOLICY_DIR += \ - device/lineage/sepolicy/qcom/dynamic + device/lineage/sepolicy/qcom/dynamic \ + device/lineage/sepolicy/qcom/system else BOARD_SEPOLICY_DIRS += \ device/lineage/sepolicy/qcom/dynamic \ diff --git a/qcom/system/file_contexts b/qcom/system/file_contexts new file mode 100644 index 0000000..9299944 --- /dev/null +++ b/qcom/system/file_contexts @@ -0,0 +1,2 @@ +# LiveDisplay +/system/bin/hw/lineage\.livedisplay@2\.0-service-sdm u:object_r:hal_lineage_livedisplay_qti_exec:s0 diff --git a/qcom/system/hal_lineage_livedisplay_qti.te b/qcom/system/hal_lineage_livedisplay_qti.te new file mode 100644 index 0000000..5100ae3 --- /dev/null +++ b/qcom/system/hal_lineage_livedisplay_qti.te @@ -0,0 +1,12 @@ +type hal_lineage_livedisplay_qti, coredomain, domain; +hal_server_domain(hal_lineage_livedisplay_qti, hal_lineage_livedisplay) + +type hal_lineage_livedisplay_qti_exec, exec_type, system_file_type, file_type; +init_daemon_domain(hal_lineage_livedisplay_qti) + +type hal_display_color_hwservice, hwservice_manager_type; +allow hal_lineage_livedisplay_qti hal_display_color_hwservice:hwservice_manager find; + +type hal_display_color_default, domain; +binder_call(hal_lineage_livedisplay_qti, hal_display_color_default) +binder_use(hal_lineage_livedisplay_qti) |