replicant-vendor_replicant/sepolicy/file_contexts
Keith Mok fcfc13ac6f sepolicy: Add domain for mkfs binaries
The init binary must transition to another domain when calling out to
executables. Create the mkfs domain for mkfs.f2fs such that init can
transition to it when formatting userdata/cache partitions if the
"formattable" flag is set.

Change-Id: I1046782386d171a59b1a3c5441ed265dc0824977
2015-12-16 10:40:28 -08:00

48 lines
1.7 KiB
Plaintext

/cache/dalvik-cache(/.*)? u:object_r:dalvikcache_data_file:s0
/cache/recovery(/.*)? u:object_r:recovery_cache_file:s0
# Auditd is a logging daemon. Put it into logd's context
/system/bin/auditd u:object_r:logd_exec:s0
/data/misc/audit(/.*)? u:object_r:auditd_log:s0
# Themes
/data/system/theme(/.*)? u:object_r:theme_data_file:s0
/system/bin/sysinit u:object_r:sysinit_exec:s0
/system/etc/init.d/90userinit u:object_r:userinit_exec:s0
/data/local/userinit.sh u:object_r:userinit_data_exec:s0
# For F2FS partitions marked "formattable"
/system/bin/mkfs\.f2fs u:object_r:mkfs_exec:s0
# For minivold in recovery
/sbin/minivold u:object_r:vold_exec:s0
#############################
# performance-related sysfs files (CM)
/sys/devices/system/cpu.*/cpufreq(/.*)? -- u:object_r:sysfs_devices_system_cpu:s0
/sys/block/mmcblk.*/queue/scheduler -- u:object_r:sysfs_devices_system_iosched:s0
/data/hostapd(/.*)? u:object_r:wifi_data_file:s0
#############
# Superuser's control sockets
/dev/socket/su-daemon(/.*)? u:object_r:superuser_device:s0
# Expansion of these hooks is a bit unconventional
/cache/com.cyanogenmod.keyhandler.dex u:object_r:dalvikcache_data_file:s0
# Lockscreen wallpaper
/data/system/users/[0-9]+/keyguard_wallpaper u:object_r:wallpaper_file:s0
# Persistent properties
/persist/properties(/.*)? u:object_r:persist_property_file:s0
# LiveDisplay
/sys/devices/virtual/graphics/fb0/aco u:object_r:livedisplay_sysfs:s0
/sys/devices/virtual/graphics/fb0/cabc u:object_r:livedisplay_sysfs:s0
/sys/devices/virtual/graphics/fb0/rgb u:object_r:livedisplay_sysfs:s0
/sys/devices/virtual/graphics/fb0/sre u:object_r:livedisplay_sysfs:s0