summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLuK1337 <priv.luk@gmail.com>2018-02-28 09:56:48 +0000
committerMichael Bestas <mkbestas@lineageos.org>2018-04-20 18:51:35 +0300
commitfe8868aa913e137baa4ea5ff5b2eb51d5ed4d2c1 (patch)
treec77a88f56edadac21a771a2f58fc4a5f12c9c062
parent4504f04ea69d7f712fbb9f18eee9e50dc1f4a97a (diff)
downloadandroid_device_qcom_sepolicy-fe8868aa913e137baa4ea5ff5b2eb51d5ed4d2c1.tar.gz
android_device_qcom_sepolicy-fe8868aa913e137baa4ea5ff5b2eb51d5ed4d2c1.tar.bz2
android_device_qcom_sepolicy-fe8868aa913e137baa4ea5ff5b2eb51d5ed4d2c1.zip
legacy: Address mm-pp-daemon denials
Change-Id: I9b5f18936b3b7dc362b81750b24af41810ea847e
-rw-r--r--legacy-common/hal_graphics_composer_default.te2
-rw-r--r--legacy-common/mm-pp-daemon.te4
-rw-r--r--legacy-common/property.te1
-rw-r--r--legacy-common/property_contexts2
-rw-r--r--legacy-common/surfaceflinger.te2
5 files changed, 11 insertions, 0 deletions
diff --git a/legacy-common/hal_graphics_composer_default.te b/legacy-common/hal_graphics_composer_default.te
index 2a3e2ee4..8a2d309a 100644
--- a/legacy-common/hal_graphics_composer_default.te
+++ b/legacy-common/hal_graphics_composer_default.te
@@ -1 +1,3 @@
allow hal_graphics_composer_default firmware_file:dir search;
+
+set_prop(hal_graphics_composer_default, postprocessing_prop)
diff --git a/legacy-common/mm-pp-daemon.te b/legacy-common/mm-pp-daemon.te
index 83859114..09f17e04 100644
--- a/legacy-common/mm-pp-daemon.te
+++ b/legacy-common/mm-pp-daemon.te
@@ -10,3 +10,7 @@ allow mm-pp-daemon {
allow mm-pp-daemon { shell_exec zygote_exec }:file rx_file_perms;
allow mm-pp-daemon system_server:unix_stream_socket rw_socket_perms;
+
+allow mm-pp-daemon ion_device:chr_file w_file_perms;
+
+set_prop(mm-pp-daemon, postprocessing_prop)
diff --git a/legacy-common/property.te b/legacy-common/property.te
new file mode 100644
index 00000000..d0db41a8
--- /dev/null
+++ b/legacy-common/property.te
@@ -0,0 +1 @@
+type postprocessing_prop, property_type;
diff --git a/legacy-common/property_contexts b/legacy-common/property_contexts
index c755d81b..923c989c 100644
--- a/legacy-common/property_contexts
+++ b/legacy-common/property_contexts
@@ -1 +1,3 @@
ctl.msm_irqbalance u:object_r:msm_irqbalance_prop:s0
+hw.cabl u:object_r:postprocessing_prop:s0
+hw.pp. u:object_r:postprocessing_prop:s0
diff --git a/legacy-common/surfaceflinger.te b/legacy-common/surfaceflinger.te
index 4522d88c..a18a1048 100644
--- a/legacy-common/surfaceflinger.te
+++ b/legacy-common/surfaceflinger.te
@@ -4,3 +4,5 @@ unix_socket_connect(surfaceflinger, mpctl, perfd)
unix_socket_send(surfaceflinger, mpctl, mpdecision)
unix_socket_connect(surfaceflinger, mpctl, mpdecision)
unix_socket_connect(surfaceflinger, pps, mm-pp-daemon)
+
+set_prop(surfaceflinger, postprocessing_prop)