diff options
| author | Linux Build Service Account <lnxbuild@localhost> | 2016-10-27 04:27:01 -0700 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2016-10-27 04:27:01 -0700 |
| commit | d8108dba08f3e31c18cafc8d70e6cfb943d1979c (patch) | |
| tree | f0fc3b43b4e70035bc32898dcff4410793529a79 | |
| parent | 4e448b91cc11e80864b7c7b99ce1106e5a31affc (diff) | |
| parent | edbf13e0f173b94b606959e9fa7426da9004ece9 (diff) | |
| download | android_device_qcom_sepolicy-d8108dba08f3e31c18cafc8d70e6cfb943d1979c.tar.gz android_device_qcom_sepolicy-d8108dba08f3e31c18cafc8d70e6cfb943d1979c.tar.bz2 android_device_qcom_sepolicy-d8108dba08f3e31c18cafc8d70e6cfb943d1979c.zip | |
Merge "sepolicy: added policy fixes for FBE to work properly"
| -rw-r--r-- | msmcobalt/file_contexts | 4 | ||||
| -rw-r--r-- | msmcobalt/init-qcom-fbe-sh.te | 36 |
2 files changed, 40 insertions, 0 deletions
diff --git a/msmcobalt/file_contexts b/msmcobalt/file_contexts index 55ff6bd2..a63b3c3a 100644 --- a/msmcobalt/file_contexts +++ b/msmcobalt/file_contexts @@ -61,3 +61,7 @@ # non-hlos mount points /firmware u:object_r:firmware_file:s0 /bt_firmware u:object_r:bt_firmware_file:s0 + +################################## +# FBE +/system/bin/init.qcom.qseecomd.sh u:object_r:init-qcom-fbe-sh_exec:s0 diff --git a/msmcobalt/init-qcom-fbe-sh.te b/msmcobalt/init-qcom-fbe-sh.te new file mode 100644 index 00000000..2eba9da1 --- /dev/null +++ b/msmcobalt/init-qcom-fbe-sh.te @@ -0,0 +1,36 @@ +# Copyright (c) 2016, The Linux Foundation. All rights reserved. +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions are +# met: +# * Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# * Redistributions in binary form must reproduce the above +# copyright notice, this list of conditions and the following +# disclaimer in the documentation and/or other materials provided +# with the distribution. +# * Neither the name of The Linux Foundation nor the names of its +# contributors may be used to endorse or promote products derived +# from this software without specific prior written permission. +# +# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED +# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF +# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT +# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS +# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR +# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF +# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR +# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, +# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE +# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN +# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +type init-qcom-fbe-sh, domain; +type init-qcom-fbe-sh_exec, exec_type, file_type; + +init_daemon_domain(init-qcom-fbe-sh) + +allow init-qcom-fbe-sh shell_exec:file rx_file_perms; + +# execute toybox/toolbox +allow init-qcom-fbe-sh toolbox_exec:file rx_file_perms; |