diff options
author | Michael Bestas <mkbestas@lineageos.org> | 2018-03-21 19:55:38 +0200 |
---|---|---|
committer | Michael Bestas <mkbestas@lineageos.org> | 2018-03-21 19:55:56 +0200 |
commit | 337f42481b3f989567fa47d23b087a207378d55b (patch) | |
tree | c04a85b7e9647f3b43c5a6abc08cde86082b4dbb /apq8098_latv | |
parent | eaf3be5bef32ac944d75fa2b463a8d5151518934 (diff) | |
parent | fb1e7cd83bfc9383ee3a9ee58aa6bd48e8e08863 (diff) | |
download | android_device_qcom_sepolicy-337f42481b3f989567fa47d23b087a207378d55b.tar.gz android_device_qcom_sepolicy-337f42481b3f989567fa47d23b087a207378d55b.tar.bz2 android_device_qcom_sepolicy-337f42481b3f989567fa47d23b087a207378d55b.zip |
Merge tag 'LA.UM.6.4.r1-06900-8x98.0' of https://source.codeaurora.org/quic/la/device/qcom/sepolicy into HEAD
"LA.UM.6.4.r1-06900-8x98.0"
Change-Id: I29a3725d14986a130666cc9f30e2984d021b537e
Diffstat (limited to 'apq8098_latv')
-rw-r--r-- | apq8098_latv/file_contexts | 1 | ||||
-rw-r--r-- | apq8098_latv/recovery.te | 30 | ||||
-rw-r--r-- | apq8098_latv/update_engine_common.te | 39 |
3 files changed, 70 insertions, 0 deletions
diff --git a/apq8098_latv/file_contexts b/apq8098_latv/file_contexts index 140b8730..8895271a 100644 --- a/apq8098_latv/file_contexts +++ b/apq8098_latv/file_contexts @@ -57,6 +57,7 @@ /dev/block/platform/soc/1da4000.ufshc/by-name/cmnlib_[ab] u:object_r:custom_ab_block_device:s0 /dev/block/platform/soc/1da4000.ufshc/by-name/cmnlib64_[ab] u:object_r:custom_ab_block_device:s0 /dev/block/platform/soc/1da4000.ufshc/by-name/devcfg_[ab] u:object_r:custom_ab_block_device:s0 +/dev/block/platform/soc/1da4000.ufshc/by-name/devcfgmedia_[ab] u:object_r:custom_ab_block_device:s0 /dev/block/platform/soc/1da4000.ufshc/by-name/hyp_[ab] u:object_r:custom_ab_block_device:s0 /dev/block/platform/soc/1da4000.ufshc/by-name/keymaster_[ab] u:object_r:custom_ab_block_device:s0 /dev/block/platform/soc/1da4000.ufshc/by-name/modem_[ab] u:object_r:modem_block_device:s0 diff --git a/apq8098_latv/recovery.te b/apq8098_latv/recovery.te new file mode 100644 index 00000000..4f75bc4e --- /dev/null +++ b/apq8098_latv/recovery.te @@ -0,0 +1,30 @@ +# Copyright (c) 2016, The Linux Foundation. All rights reserved. +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions are +# met: +# * Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# * Redistributions in binary form must reproduce the above +# copyright notice, this list of conditions and the following +# disclaimer in the documentation and/or other materials provided +# with the distribution. +# * Neither the name of The Linux Foundation nor the names of its +# contributors may be used to endorse or promote products derived +# from this software without specific prior written permission. +# +# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED +# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF +# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT +# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS +# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR +# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF +# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR +# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, +# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE +# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN +# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +recovery_only(` + allow recovery vendor_shell_exec:file x_file_perms; +') diff --git a/apq8098_latv/update_engine_common.te b/apq8098_latv/update_engine_common.te new file mode 100644 index 00000000..af647472 --- /dev/null +++ b/apq8098_latv/update_engine_common.te @@ -0,0 +1,39 @@ +# Copyright (c) 2017, The Linux Foundation. All rights reserved. +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions are +# met: +# * Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# * Redistributions in binary form must reproduce the above +# copyright notice, this list of conditions and the following +# disclaimer in the documentation and/or other materials provided +# with the distribution. +# * Neither the name of The Linux Foundation nor the names of its +# contributors may be used to endorse or promote products derived +# from this software without specific prior written permission. +# +# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED +# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF +# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT +# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS +# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR +# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF +# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR +# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, +# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE +# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN +# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + +# Allow update_engine and update_engine_sideload (recovery) read/write on the +# device-specific partitions it should update. +allow update_engine_common { + custom_ab_block_device + xbl_block_device + boot_block_device + ssd_device + modem_block_device + system_block_device + mdtp_device +}:blk_file rw_file_perms; + |