diff options
| author | Andrey Markovytch <andreym@codeaurora.org> | 2016-10-23 14:03:00 +0300 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2016-10-23 04:05:25 -0700 |
| commit | edbf13e0f173b94b606959e9fa7426da9004ece9 (patch) | |
| tree | 0ff3af1777a7ca9f4bc52083983b55d126155795 | |
| parent | 22cbbd8e94223fb1970bc88724682cc48e231942 (diff) | |
| download | android_device_qcom_sepolicy-edbf13e0f173b94b606959e9fa7426da9004ece9.tar.gz android_device_qcom_sepolicy-edbf13e0f173b94b606959e9fa7426da9004ece9.tar.bz2 android_device_qcom_sepolicy-edbf13e0f173b94b606959e9fa7426da9004ece9.zip | |
sepolicy: added policy fixes for FBE to work properly
FBE needs changes in sepolicy
CRs-Fixed: 1081232
Change-Id: I63095a37ce04b500a791a59002ae478d76e8218d
| -rw-r--r-- | msmcobalt/file_contexts | 4 | ||||
| -rw-r--r-- | msmcobalt/init-qcom-fbe-sh.te | 36 |
2 files changed, 40 insertions, 0 deletions
diff --git a/msmcobalt/file_contexts b/msmcobalt/file_contexts index 46ad29a2..eeda8924 100644 --- a/msmcobalt/file_contexts +++ b/msmcobalt/file_contexts @@ -60,3 +60,7 @@ # non-hlos mount points /firmware u:object_r:firmware_file:s0 /bt_firmware u:object_r:bt_firmware_file:s0 + +################################## +# FBE +/system/bin/init.qcom.qseecomd.sh u:object_r:init-qcom-fbe-sh_exec:s0 diff --git a/msmcobalt/init-qcom-fbe-sh.te b/msmcobalt/init-qcom-fbe-sh.te new file mode 100644 index 00000000..2eba9da1 --- /dev/null +++ b/msmcobalt/init-qcom-fbe-sh.te @@ -0,0 +1,36 @@ +# Copyright (c) 2016, The Linux Foundation. All rights reserved. +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions are +# met: +# * Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# * Redistributions in binary form must reproduce the above +# copyright notice, this list of conditions and the following +# disclaimer in the documentation and/or other materials provided +# with the distribution. +# * Neither the name of The Linux Foundation nor the names of its +# contributors may be used to endorse or promote products derived +# from this software without specific prior written permission. +# +# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED +# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF +# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT +# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS +# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR +# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF +# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR +# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, +# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE +# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN +# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +type init-qcom-fbe-sh, domain; +type init-qcom-fbe-sh_exec, exec_type, file_type; + +init_daemon_domain(init-qcom-fbe-sh) + +allow init-qcom-fbe-sh shell_exec:file rx_file_perms; + +# execute toybox/toolbox +allow init-qcom-fbe-sh toolbox_exec:file rx_file_perms; |