replicant-vendor_replicant/sepolicy/file_contexts
Steve Kondik 4a24ffeb6a sepolicy: More policy for sdcardfs
Change-Id: Iddc6f86bd1e4b9942139acf9b7e75279b3865b8a
2016-07-25 22:11:33 -07:00

65 lines
2.5 KiB
Plaintext

/cache/dalvik-cache(/.*)? u:object_r:dalvikcache_data_file:s0
/cache/recovery(/.*)? u:object_r:recovery_cache_file:s0
# Auditd is a logging daemon. Put it into logd's context
/system/bin/auditd u:object_r:logd_exec:s0
/data/misc/audit(/.*)? u:object_r:auditd_log:s0
# Themes
/data/system/theme(/.*)? u:object_r:theme_data_file:s0
/system/bin/sysinit u:object_r:sysinit_exec:s0
/system/etc/init.d/90userinit u:object_r:userinit_exec:s0
/data/local/userinit.sh u:object_r:userinit_data_exec:s0
# For EXFAT/F2FS/NTFS partitions marked "formattable"
/system/bin/mkfs\.exfat u:object_r:mkfs_exec:s0
/system/bin/mkfs\.f2fs u:object_r:mkfs_exec:s0
/system/bin/mkfs\.ntfs u:object_r:mkfs_exec:s0
# For minivold in recovery
/sbin/minivold u:object_r:vold_exec:s0
#############################
# performance-related sysfs files (CM)
/sys/devices/system/cpu.*/cpufreq(/.*)? u:object_r:sysfs_devices_system_cpu:s0
/sys/block/mmcblk.*/queue/scheduler u:object_r:sysfs_devices_system_iosched:s0
/data/hostapd(/.*)? u:object_r:wifi_data_file:s0
#############
# Superuser's control sockets
/dev/socket/su-daemon(/.*)? u:object_r:superuser_device:s0
# Expansion of these hooks is a bit unconventional
/cache/com.cyanogenmod.keyhandler.dex u:object_r:dalvikcache_data_file:s0
# Lockscreen wallpaper
/data/system/users/[0-9]+/keyguard_wallpaper u:object_r:wallpaper_file:s0
# Persistent properties
/persist/properties(/.*)? u:object_r:persist_property_file:s0
# LiveDisplay
/sys/devices/virtual/graphics/fb0/aco u:object_r:livedisplay_sysfs:s0
/sys/devices/virtual/graphics/fb0/cabc u:object_r:livedisplay_sysfs:s0
/sys/devices/virtual/graphics/fb0/rgb u:object_r:livedisplay_sysfs:s0
/sys/devices/virtual/graphics/fb0/sre u:object_r:livedisplay_sysfs:s0
/sys/devices/virtual/graphics/fb0/color_enhance u:object_r:livedisplay_sysfs:s0
# fsck
/system/bin/fsck\.ntfs u:object_r:fsck_exec:s0
/system/bin/fsck\.exfat u:object_r:fsck_exec:s0
# bash
/system/xbin/bash u:object_r:shell_exec:s0
# emulated storage via sdcardfs
/mnt/runtime/(default|read|write)/emulated/[0-9](/.*)? u:object_r:media_rw_data_file:s0
/storage/emulated/[0-9](/.*)? u:object_r:media_rw_data_file:s0
/mnt/shell/emulated/([1-9])?[0-9](/.*)? u:object_r:media_rw_data_file:s0
/data/media\.tmp(/.*)? u:object_r:media_rw_data_file:s0