summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAlex Hong <rurumihong@google.com>2019-08-16 01:30:34 +0800
committerAlex Hong <rurumihong@google.com>2019-08-19 12:36:53 +0800
commitcebbf406010f9399c87a380226b171c95ccc2f0b (patch)
treec338043b80b9df099e85de8d4fd6f556dfef8edb
parent629747b16dd8d2fc8701d8c532f5fc8caabb5277 (diff)
downloadredfin-sepolicy-cebbf406010f9399c87a380226b171c95ccc2f0b.tar.gz
Initial redfin sepolicy
Bug: 139478768 Change-Id: I77fa87b91d0c6890b03f4225f366b86ef32d4798
-rw-r--r--redfin-sepolicy.mk8
-rw-r--r--vendor/google/file.te2
-rw-r--r--vendor/qcom/common/attributes1
-rw-r--r--vendor/qcom/common/file.te3
-rw-r--r--vendor/qcom/common/file_contexts10
5 files changed, 24 insertions, 0 deletions
diff --git a/redfin-sepolicy.mk b/redfin-sepolicy.mk
new file mode 100644
index 0000000..9cb38b0
--- /dev/null
+++ b/redfin-sepolicy.mk
@@ -0,0 +1,8 @@
+ARD_PLAT_PUBLIC_SEPOLICY_DIR := device/google/redfin-sepolicy/public
+BOARD_PLAT_PRIVATE_SEPOLICY_DIR := device/google/redfin-sepolicy/private
+
+# vendors
+BOARD_SEPOLICY_DIRS += device/google/redfin-sepolicy/vendor/google
+BOARD_SEPOLICY_DIRS += device/google/redfin-sepolicy/vendor/qcom/common
+BOARD_SEPOLICY_DIRS += device/google/redfin-sepolicy/vendor/qcom/sm7250
+
diff --git a/vendor/google/file.te b/vendor/google/file.te
new file mode 100644
index 0000000..e265487
--- /dev/null
+++ b/vendor/google/file.te
@@ -0,0 +1,2 @@
+type persist_default_file, file_type, vendor_persist_type;
+
diff --git a/vendor/qcom/common/attributes b/vendor/qcom/common/attributes
new file mode 100644
index 0000000..7e6def7
--- /dev/null
+++ b/vendor/qcom/common/attributes
@@ -0,0 +1 @@
+attribute vendor_persist_type;
diff --git a/vendor/qcom/common/file.te b/vendor/qcom/common/file.te
new file mode 100644
index 0000000..aa2bbb0
--- /dev/null
+++ b/vendor/qcom/common/file.te
@@ -0,0 +1,3 @@
+# used for /dsp files
+type adsprpcd_file, file_type, mlstrustedobject, vendor_file_type;
+
diff --git a/vendor/qcom/common/file_contexts b/vendor/qcom/common/file_contexts
new file mode 100644
index 0000000..221bf72
--- /dev/null
+++ b/vendor/qcom/common/file_contexts
@@ -0,0 +1,10 @@
+###################################
+# adsp files
+#
+/dsp(/.*)? u:object_r:adsprpcd_file:s0
+
+###################################
+# persist files
+#
+/persist u:object_r:persist_default_file:s0
+