ADHOC/replicant-device_samsung_galaxys2-common
3
0
Fork 0
Code Issues Releases Activity

Merge "Make SELinux policies more 4.4 compatible" into cm-11.0

Browse Source
This commit is contained in:
Daniel Hillenbrand 2013-12-03 08:21:11 +00:00 committed by Gerrit Code Review
commit a342fe2496
7 changed files with 11 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
BoardCommonConfig.mk
View File

@ -142,10 +142,13 @@ BOARD_SEPOLICY_DIRS += \
BOARD_SEPOLICY_UNION += \ BOARD_SEPOLICY_UNION += \
device.te \ device.te \
drmserver.te \
ueventd.te \
domain.te \ domain.te \
file.te \ file.te \
file_contexts \ file_contexts \
rild.te rild.te \
vold.te
# Recovery # Recovery
BOARD_CUSTOM_RECOVERY_KEYMAPPING := ../../device/samsung/galaxys2-common/recovery/recovery_keys.c BOARD_CUSTOM_RECOVERY_KEYMAPPING := ../../device/samsung/galaxys2-common/recovery/recovery_keys.c

1
selinux/device.te
View File

@ -1,3 +1,2 @@
type mali_device, dev_type, mlstrustedobject;
type rfkill_device, dev_type; type rfkill_device, dev_type;
type efs_block_device, dev_type; type efs_block_device, dev_type;

3
selinux/domain.te
View File

@ -1,6 +1,3 @@
## /dev/mali, /dev/ump
allow domain mali_device:chr_file rw_file_perms;
## /dev/rfkill for wpa_supp ## /dev/rfkill for wpa_supp
allow wpa rfkill_device:chr_file rw_file_perms; allow wpa rfkill_device:chr_file rw_file_perms;

1
selinux/drmserver.te Normal file
View File

@ -0,0 +1 @@
allow drmserver sdcard_external:file open;

6
selinux/file_contexts
View File

@ -1,7 +1,7 @@
# GFX # GFX
/dev/mali u:object_r:mali_device:s0 /dev/mali u:object_r:graphics_device:s0
/dev/ump u:object_r:mali_device:s0 /dev/ump u:object_r:graphics_device:s0
/dev/fimg2d u:object_r:mali_device:s0 /dev/fimg2d u:object_r:graphics_device:s0
# RIL # RIL
/dev/umts_boot0 u:object_r:radio_device:s0 /dev/umts_boot0 u:object_r:radio_device:s0

2
selinux/ueventd.te Normal file
View File

@ -0,0 +1,2 @@
allow ueventd sdcard_external:dir search;
allow ueventd sdcard_external:file r_file_perms;

1
selinux/vold.te Normal file
View File

@ -0,0 +1 @@
allow vold sdcard_external:file rw_file_perms;