diff options
| -rw-r--r-- | exynos/sepolicy.mk | 23 | ||||
| -rw-r--r-- | exynos/system/file_contexts | 2 | ||||
| -rw-r--r-- | exynos/system/hal_lineage_livedisplay_exynos.te | 12 | ||||
| -rw-r--r-- | exynos/vendor/file_contexts | 2 | ||||
| -rw-r--r-- | exynos/vendor/hal_lineage_livedisplay_exynos.te | 8 |
5 files changed, 47 insertions, 0 deletions
diff --git a/exynos/sepolicy.mk b/exynos/sepolicy.mk new file mode 100644 index 0000000..56097ea --- /dev/null +++ b/exynos/sepolicy.mk @@ -0,0 +1,23 @@ +# +# This policy configuration will be used by all exynos products +# that inherit from Lineage +# + +ifeq ($(TARGET_COPY_OUT_VENDOR), vendor) +ifeq ($(BOARD_VENDORIMAGE_FILE_SYSTEM_TYPE),) +TARGET_USES_PREBUILT_VENDOR_SEPOLICY ?= true +endif +endif + +BOARD_PLAT_PRIVATE_SEPOLICY_DIR += \ + device/lineage/sepolicy/exynos/private + +ifeq ($(TARGET_USES_PREBUILT_VENDOR_SEPOLICY), true) +BOARD_PLAT_PRIVATE_SEPOLICY_DIR += \ + device/lineage/sepolicy/exynos/dynamic \ + device/lineage/sepolicy/exynos/system +else +BOARD_SEPOLICY_DIRS += \ + device/lineage/sepolicy/exynos/dynamic \ + device/lineage/sepolicy/exynos/vendor +endif diff --git a/exynos/system/file_contexts b/exynos/system/file_contexts new file mode 100644 index 0000000..bcaf8af --- /dev/null +++ b/exynos/system/file_contexts @@ -0,0 +1,2 @@ +# LiveDisplay +/system/bin/hw/lineage\.livedisplay@[0-9]\.[0-9]-service.samsung-exynos u:object_r:hal_lineage_livedisplay_exynos_exec:s0 diff --git a/exynos/system/hal_lineage_livedisplay_exynos.te b/exynos/system/hal_lineage_livedisplay_exynos.te new file mode 100644 index 0000000..3000524 --- /dev/null +++ b/exynos/system/hal_lineage_livedisplay_exynos.te @@ -0,0 +1,12 @@ +type hal_lineage_livedisplay_exynos, coredomain, domain; +hal_server_domain(hal_lineage_livedisplay_exynos, hal_lineage_livedisplay) + +type hal_lineage_livedisplay_exynos_exec, exec_type, system_file_type, file_type; +init_daemon_domain(hal_lineage_livedisplay_exynos) + +type hal_display_color_hwservice, hwservice_manager_type; +allow hal_lineage_livedisplay_exynos hal_display_color_hwservice:hwservice_manager find; + +type hal_display_color_default, domain; +binder_call(hal_lineage_livedisplay_exynos, hal_display_color_default) +binder_use(hal_lineage_livedisplay_exynos) diff --git a/exynos/vendor/file_contexts b/exynos/vendor/file_contexts new file mode 100644 index 0000000..a5b7884 --- /dev/null +++ b/exynos/vendor/file_contexts @@ -0,0 +1,2 @@ +# LiveDisplay HAL +/(vendor|system/vendor)/bin/hw/vendor\.lineage\.livedisplay@[0-9]\.[0-9]-service\.samsung-exynos u:object_r:hal_lineage_livedisplay_exynos_exec:s0 diff --git a/exynos/vendor/hal_lineage_livedisplay_exynos.te b/exynos/vendor/hal_lineage_livedisplay_exynos.te new file mode 100644 index 0000000..c3b0dc1 --- /dev/null +++ b/exynos/vendor/hal_lineage_livedisplay_exynos.te @@ -0,0 +1,8 @@ +type hal_lineage_livedisplay_exynos, domain; +hal_server_domain(hal_lineage_livedisplay_exynos, hal_lineage_livedisplay) + +type hal_lineage_livedisplay_exynos_exec, exec_type, vendor_file_type, file_type; +init_daemon_domain(hal_lineage_livedisplay_exynos) + +# Allow LiveDisplay HAL's default implementation to use vendor-binder service +vndbinder_use(hal_lineage_livedisplay_exynos) |