summaryrefslogtreecommitdiffstats
path: root/sdm660
diff options
context:
space:
mode:
authorRavi Kumar Siddojigari <rsiddoji@codeaurora.org>2017-08-07 06:16:18 +0530
committerGerrit - the friendly Code Review server <code-review@localhost>2017-08-06 23:29:56 -0700
commit1b411cbf6d475f9ca340e4da2cd04a0afde24322 (patch)
tree1195ea54ff02d5cd1812697969e0b3e9013b5887 /sdm660
parentb72606ae88a57248c1c16d3b807e9b4f962e63a9 (diff)
downloadandroid_device_qcom_sepolicy-1b411cbf6d475f9ca340e4da2cd04a0afde24322.tar.gz
android_device_qcom_sepolicy-1b411cbf6d475f9ca340e4da2cd04a0afde24322.tar.bz2
android_device_qcom_sepolicy-1b411cbf6d475f9ca340e4da2cd04a0afde24322.zip
sepolicy : add secontext for the v4l related sysfs entires
with the new restriction on sysfs access it expected that paths like below need explicit secontext . /sys/devices/soc/caa0000.qcom,jpeg/video4linux/video1/name /sys/devices/soc/c900000.qcom,mdss_mdp/bw_mode_bitmap Change-Id: Ic9f94f48bca6e455822567ea360ffaa10ffa70cd
Diffstat (limited to 'sdm660')
-rw-r--r--sdm660/file_contexts12
1 files changed, 12 insertions, 0 deletions
diff --git a/sdm660/file_contexts b/sdm660/file_contexts
index 86741051..b0752bce 100644
--- a/sdm660/file_contexts
+++ b/sdm660/file_contexts
@@ -143,3 +143,15 @@
#
/vendor/lib(64)?/hw/gralloc\.sdm660\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/hw/vulkan\.sdm660\.so u:object_r:same_process_hal_file:s0
+
+###############################################################################
+# sysfs
+#
+
+/sys/devices(/platform)?/soc/[a-z0-9]+.qcom,mdss_cam/video4linux/video[0-33]/name(/.*)? u:object_r:sysfs_graphics:s0
+/sys/devices(/platform)?/soc/[a-z0-9]+.qcom,mdss_rotator/video4linux/video[0-33]/name(/.*)? u:object_r:sysfs_graphics:s0
+/sys/devices(/platform)?/soc/[a-z0-9]+.qcom,vidc/video4linux/video[0-33]/name(/.*)? u:object_r:sysfs_graphics:s0
+/sys/devices(/platform)?/soc/[a-z0-9]+.qcom,cci/[a-z0-9]+.qcom,cci:qcom,camera@[0-2]/video4linux/video[0-33]/name(/.*)? u:object_r:sysfs_graphics:s0
+/sys/devices/soc/[a-z0-9]+.qcom,mdss_mdp/bw_mode_bitmap u:object_r:sysfs_graphics:s0
+/sys/devices/soc/[a-z0-9]+.qcom,jpeg/video4linux/video[0-33]/name u:object_r:sysfs_graphics:s0
+#/sys/devices/soc/[a-z0-9]+.qcom,mdss_rotator/caps(/.*)? u:object_r:sysfs_type:s0