summaryrefslogtreecommitdiff
path: root/vendor
diff options
context:
space:
mode:
authorAdam Shih <adamshih@google.com>2019-08-14 13:55:18 +0800
committerChenglu Lin <chenglulin@google.com>2019-08-30 14:17:39 +0800
commit8553b5b7268b8daebd9d4c99fde9bdf125fd8882 (patch)
tree416497dedb608a4f9351a85f5dba0e4ef9a7bc73 /vendor
parentcebbf406010f9399c87a380226b171c95ccc2f0b (diff)
downloadredfin-sepolicy-8553b5b7268b8daebd9d4c99fde9bdf125fd8882.tar.gz
initialize selinux contexts
Bug: 137166127 Bug: 140276044 Change-Id: I2e277bc98eb67b71fa91536e509e3331a33ed14b
Diffstat (limited to 'vendor')
-rw-r--r--vendor/google/airbrush.te3
-rw-r--r--vendor/google/bug_map49
-rw-r--r--vendor/google/cbrs_setup.te1
-rw-r--r--vendor/google/certs/app.x509.pem27
-rw-r--r--vendor/google/certs/pulse-release.x509.pem15
-rw-r--r--vendor/google/citadel_provision.te3
-rw-r--r--vendor/google/citadeld.te3
-rw-r--r--vendor/google/color_init.te3
-rw-r--r--vendor/google/device.te12
-rw-r--r--vendor/google/face_debug.te1
-rw-r--r--vendor/google/file.te41
-rw-r--r--vendor/google/file_contexts85
-rw-r--r--vendor/google/genfs_contexts162
-rw-r--r--vendor/google/google_touch_app.te1
-rw-r--r--vendor/google/grilservice_app.te1
-rw-r--r--vendor/google/hal_authsecret_citadel.te3
-rw-r--r--vendor/google/hal_dumpstate_impl.te3
-rw-r--r--vendor/google/hal_keymaster_citadel.te3
-rw-r--r--vendor/google/hal_neuralnetworks_darwinn.te3
-rw-r--r--vendor/google/hal_oemlock_citadel.te3
-rw-r--r--vendor/google/hal_radioext_default.te3
-rw-r--r--vendor/google/hal_usb_impl.te3
-rw-r--r--vendor/google/hal_weaver_citadel.te3
-rw-r--r--vendor/google/hal_wifi_ext.te3
-rw-r--r--vendor/google/hal_wlc.te3
-rw-r--r--vendor/google/hwservice.te6
-rw-r--r--vendor/google/hwservice_contexts7
-rw-r--r--vendor/google/init-firstboot.te3
-rw-r--r--vendor/google/init-insmod-sh.te3
-rw-r--r--vendor/google/init_citadel.te4
-rw-r--r--vendor/google/init_dp.te3
-rw-r--r--vendor/google/init_radio.te3
-rw-r--r--vendor/google/keys.conf6
-rw-r--r--vendor/google/logger_app.te1
-rw-r--r--vendor/google/mac_permissions.xml30
-rw-r--r--vendor/google/modem_diagnostics.te2
-rw-r--r--vendor/google/modem_svc.te3
-rw-r--r--vendor/google/oslo_app.te1
-rw-r--r--vendor/google/pixelstats.te2
-rw-r--r--vendor/google/pixelstats_vendor.te3
-rw-r--r--vendor/google/property.te11
-rw-r--r--vendor/google/property_contexts71
-rw-r--r--vendor/google/ramdump.te3
-rw-r--r--vendor/google/ramdump_app.te1
-rw-r--r--vendor/google/ramoops.te3
-rw-r--r--vendor/google/rlsservice.te3
-rw-r--r--vendor/google/seapp_contexts24
-rw-r--r--vendor/google/ssr_detector.te1
-rw-r--r--vendor/google/tcpdump_logger.te3
-rw-r--r--vendor/google/vendor_init.te1
-rw-r--r--vendor/google/vndservice.te6
-rw-r--r--vendor/google/vndservice_contexts7
-rw-r--r--vendor/google/wait_for_strongbox.te3
-rw-r--r--vendor/qcom/common/adpl.te3
-rw-r--r--vendor/qcom/common/adsprpcd.te3
-rw-r--r--vendor/qcom/common/atfwd.te3
-rw-r--r--vendor/qcom/common/attributes1
-rw-r--r--vendor/qcom/common/audiod.te3
-rw-r--r--vendor/qcom/common/cdsprpcd.te3
-rw-r--r--vendor/qcom/common/charger_monitor.te3
-rw-r--r--vendor/qcom/common/chre.te3
-rw-r--r--vendor/qcom/common/cnd.te3
-rw-r--r--vendor/qcom/common/con_monitor.te1
-rw-r--r--vendor/qcom/common/device.te69
-rw-r--r--vendor/qcom/common/diag.te3
-rw-r--r--vendor/qcom/common/dtsconfigurator.te3
-rw-r--r--vendor/qcom/common/dtseagleservice.te3
-rw-r--r--vendor/qcom/common/energyawareness.te3
-rw-r--r--vendor/qcom/common/esepmdaemon.te3
-rw-r--r--vendor/qcom/common/factory_ota_app.te1
-rw-r--r--vendor/qcom/common/fidodaemon.te3
-rw-r--r--vendor/qcom/common/file.te192
-rw-r--r--vendor/qcom/common/file_contexts383
-rw-r--r--vendor/qcom/common/fm.te2
-rw-r--r--vendor/qcom/common/fps_hal.te3
-rw-r--r--vendor/qcom/common/fstman.te3
-rw-r--r--vendor/qcom/common/gamed.te3
-rw-r--r--vendor/qcom/common/genfs_contexts29
-rw-r--r--vendor/qcom/common/hal_alarm_qti_default.te3
-rw-r--r--vendor/qcom/common/hal_bluetooth_qti.te3
-rw-r--r--vendor/qcom/common/hal_display_color.te3
-rw-r--r--vendor/qcom/common/hal_dpmQmiMgr.te3
-rw-r--r--vendor/qcom/common/hal_drm_clearkey.te3
-rw-r--r--vendor/qcom/common/hal_drm_widevine.te3
-rw-r--r--vendor/qcom/common/hal_factory_qti_default.te3
-rw-r--r--vendor/qcom/common/hal_gatekeeper_qti.te3
-rw-r--r--vendor/qcom/common/hal_gnss_qti.te3
-rw-r--r--vendor/qcom/common/hal_imsrtp.te3
-rw-r--r--vendor/qcom/common/hal_iop_default.te3
-rw-r--r--vendor/qcom/common/hal_keymaster_qti.te3
-rw-r--r--vendor/qcom/common/hal_mirrorlink_qti.te3
-rw-r--r--vendor/qcom/common/hal_neuralnetworks.te3
-rw-r--r--vendor/qcom/common/hal_perf_default.te3
-rw-r--r--vendor/qcom/common/hal_qdutils_disp_qti.te3
-rw-r--r--vendor/qcom/common/hal_qteeconnector_qti.te3
-rw-r--r--vendor/qcom/common/hal_rcsservice.te3
-rw-r--r--vendor/qcom/common/hal_sensorscalibrate_qti_default.te3
-rw-r--r--vendor/qcom/common/hal_tui_comm_qti.te3
-rw-r--r--vendor/qcom/common/hardware_info_app.te1
-rw-r--r--vendor/qcom/common/hbtp.te3
-rw-r--r--vendor/qcom/common/hostapd.te2
-rw-r--r--vendor/qcom/common/hvdcp.te3
-rw-r--r--vendor/qcom/common/hwservice.te30
-rw-r--r--vendor/qcom/common/hwservice_contexts34
-rw-r--r--vendor/qcom/common/ims.te3
-rw-r--r--vendor/qcom/common/imshelper_app.te1
-rw-r--r--vendor/qcom/common/init_shell.te3
-rw-r--r--vendor/qcom/common/ioctl_defines57
-rw-r--r--vendor/qcom/common/ioctl_macros56
-rw-r--r--vendor/qcom/common/irsc_util.te3
-rw-r--r--vendor/qcom/common/location.te3
-rw-r--r--vendor/qcom/common/logdumpd.te3
-rw-r--r--vendor/qcom/common/mcStarter.te3
-rw-r--r--vendor/qcom/common/mdm_helper.te3
-rw-r--r--vendor/qcom/common/mdtp.te2
-rw-r--r--vendor/qcom/common/mdtpservice_app.te1
-rw-r--r--vendor/qcom/common/mlid.te3
-rw-r--r--vendor/qcom/common/mm-pp-daemon.te3
-rw-r--r--vendor/qcom/common/mm-qcamerad.te3
-rwxr-xr-xvendor/qcom/common/mmi.te3
-rw-r--r--vendor/qcom/common/msm_irqbalanced.te3
-rw-r--r--vendor/qcom/common/netmgrd.te3
-rw-r--r--vendor/qcom/common/nqnfcinfo.te3
-rw-r--r--vendor/qcom/common/pd_services.te3
-rw-r--r--vendor/qcom/common/peripheral_manager.te3
-rw-r--r--vendor/qcom/common/port-bridge.te3
-rw-r--r--vendor/qcom/common/power_off_alarm.te3
-rw-r--r--vendor/qcom/common/poweroffalarm_app.te1
-rw-r--r--vendor/qcom/common/poweroffhandler.te3
-rw-r--r--vendor/qcom/common/property.te80
-rw-r--r--vendor/qcom/common/property_contexts81
-rwxr-xr-xvendor/qcom/common/qcomsysd.te3
-rw-r--r--vendor/qcom/common/qdcm-ss.te3
-rw-r--r--vendor/qcom/common/qdma_app.te1
-rw-r--r--vendor/qcom/common/qdmastatsd.te3
-rw-r--r--vendor/qcom/common/qfp-daemon.te3
-rw-r--r--vendor/qcom/common/qlogd.te3
-rw-r--r--vendor/qcom/common/qmuxd.te3
-rw-r--r--vendor/qcom/common/qrtr.te3
-rw-r--r--vendor/qcom/common/qsee_svc_app.te1
-rw-r--r--vendor/qcom/common/qseeproxy.te3
-rw-r--r--vendor/qcom/common/qti-logkit.te3
-rw-r--r--vendor/qcom/common/qti.te3
-rw-r--r--vendor/qcom/common/qti_logkit_app.te1
-rw-r--r--vendor/qcom/common/qtidataservices_app.te1
-rw-r--r--vendor/qcom/common/qvop.te3
-rw-r--r--vendor/qcom/common/rfs_access.te3
-rw-r--r--vendor/qcom/common/ridl.te3
-rw-r--r--vendor/qcom/common/ril_config_service.te1
-rw-r--r--vendor/qcom/common/rmt_storage.te3
-rw-r--r--vendor/qcom/common/seapp_contexts21
-rw-r--r--vendor/qcom/common/sec_nvm.te3
-rw-r--r--vendor/qcom/common/secotad.te3
-rw-r--r--vendor/qcom/common/secure_ui_service_app.te1
-rw-r--r--vendor/qcom/common/seemp_health_daemon.te3
-rw-r--r--vendor/qcom/common/sensors.te3
-rw-r--r--vendor/qcom/common/service.te15
-rw-r--r--vendor/qcom/common/spdaemon.te3
-rw-r--r--vendor/qcom/common/ssgqmigd.te3
-rw-r--r--vendor/qcom/common/ssr_diag.te3
-rw-r--r--vendor/qcom/common/ssr_setup.te3
-rw-r--r--vendor/qcom/common/subsystem_ramdump.te3
-rw-r--r--vendor/qcom/common/tbaseLoader.te3
-rw-r--r--vendor/qcom/common/thermal-engine.te3
-rw-r--r--vendor/qcom/common/time_daemon.te4
-rw-r--r--vendor/qcom/common/timeservice_app.te1
-rw-r--r--vendor/qcom/common/tlocd.te3
-rw-r--r--vendor/qcom/common/touchfusion.te3
-rw-r--r--vendor/qcom/common/usb_uicc_daemon.te3
-rw-r--r--vendor/qcom/common/usf.te3
-rw-r--r--vendor/qcom/common/vm_bms.te3
-rw-r--r--vendor/qcom/common/vndservice.te5
-rw-r--r--vendor/qcom/common/vndservice_contexts2
-rwxr-xr-xvendor/qcom/common/vppservice.te3
-rw-r--r--vendor/qcom/common/wcnss_service.te3
-rw-r--r--vendor/qcom/common/wfdhdcphalservice.te3
-rw-r--r--vendor/qcom/common/wifi_ftmd.te3
-rw-r--r--vendor/qcom/common/wifidisplayhalservice.te3
-rw-r--r--vendor/qcom/common/wigighalsvc.te3
-rw-r--r--vendor/qcom/common/wigignpt.te3
180 files changed, 2008 insertions, 6 deletions
diff --git a/vendor/google/airbrush.te b/vendor/google/airbrush.te
new file mode 100644
index 0000000..d204e43
--- /dev/null
+++ b/vendor/google/airbrush.te
@@ -0,0 +1,3 @@
+type airbrush, domain;
+type airbrush_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(airbrush) \ No newline at end of file
diff --git a/vendor/google/bug_map b/vendor/google/bug_map
new file mode 100644
index 0000000..6a92da8
--- /dev/null
+++ b/vendor/google/bug_map
@@ -0,0 +1,49 @@
+adsprpcd adsprpcd capability 132321887
+fsverity_init fsverity_init capability 132323675
+hal_audio_default sysfs_thermal dir 129111829
+hal_face_default config_prop file 134894179
+hal_face_default hal_face_default capability 134123420
+hal_face_default vendor_display_prop file 134894179
+hal_health_default persist_default_file lnk_file 132324546
+hal_health_default sysfs file 132324546
+hal_imsrtp default_prop file 134122990
+hal_rcsservice default_prop file 129383643
+hal_sensors_default sysfs_esoc dir 129437033
+hal_sensors_default sysfs_ssr file 129437033
+hal_tetheroffload_default unlabeled dir 135646017
+ims sysfs_faceauth dir 129460752
+init-insmod-sh init-insmod-sh capability 132594872
+init kernel system 132409186
+init socket_device sock_file 132412558
+kernel kernel capability 132594872
+netd netd capability 129670638
+priv_app camera_ro_prop file 134899434
+qtidataservices_app sysfs_esoc dir 131581902
+qtidataservices_app sysfs_msm_subsys dir 131581902
+sensors diag_device chr_file 129437033
+sensors sensors qipcrtr_socket 129437033
+sensors sysfs_esoc dir 129437033
+sensors sysfs_ssr file 129437033
+system_app vendor_display_prop file 131773821
+thermal-engine socket_device dir 124250714
+thermal-engine sysfs_batteryinfo dir 124250714
+thermal-engine sysfs dir 124250714
+thermal-engine sysfs_esoc dir 124250714
+thermal-engine sysfs_leds dir 124250714
+thermal-engine sysfs_soc dir 124250714
+thermal-engine sysfs_ssr file 124250714
+time_daemon sysfs_esoc dir 128869480
+time_daemon sysfs_faceauth dir 128869480
+time_daemon sysfs_faceauth file 128869480
+time_daemon sysfs_msm_subsys dir 128869480
+time_daemon sysfs_soc dir 128869480
+time_daemon sysfs_soc file 128869480
+time_daemon sysfs_ssr file 128869480
+time_daemon unlabeled dir 135646017
+ueventd ueventd capability 132595817
+untrusted_app_27 camera_ro_prop file 134899434
+vendor_misc_writer sysfs_dt_firmware_android dir 134122603
+vendor_pd_mapper kmsg_device chr_file 129744410
+vendor_pd_mapper sysfs_esoc dir 129744410
+vendor_pd_mapper sysfs_msm_subsys dir 129744410
+zygote zygote capability 132595817
diff --git a/vendor/google/cbrs_setup.te b/vendor/google/cbrs_setup.te
new file mode 100644
index 0000000..1babb59
--- /dev/null
+++ b/vendor/google/cbrs_setup.te
@@ -0,0 +1 @@
+type cbrs_setup_app, domain;
diff --git a/vendor/google/certs/app.x509.pem b/vendor/google/certs/app.x509.pem
new file mode 100644
index 0000000..8e3e627
--- /dev/null
+++ b/vendor/google/certs/app.x509.pem
@@ -0,0 +1,27 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
diff --git a/vendor/google/certs/pulse-release.x509.pem b/vendor/google/certs/pulse-release.x509.pem
new file mode 100644
index 0000000..fb11572
--- /dev/null
+++ b/vendor/google/certs/pulse-release.x509.pem
@@ -0,0 +1,15 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/vendor/google/citadel_provision.te b/vendor/google/citadel_provision.te
new file mode 100644
index 0000000..f707efd
--- /dev/null
+++ b/vendor/google/citadel_provision.te
@@ -0,0 +1,3 @@
+type citadel_provision, domain;
+type citadel_provision_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(citadel_provision) \ No newline at end of file
diff --git a/vendor/google/citadeld.te b/vendor/google/citadeld.te
new file mode 100644
index 0000000..769795a
--- /dev/null
+++ b/vendor/google/citadeld.te
@@ -0,0 +1,3 @@
+type citadeld, domain;
+type citadeld_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(citadeld) \ No newline at end of file
diff --git a/vendor/google/color_init.te b/vendor/google/color_init.te
new file mode 100644
index 0000000..46c3ebc
--- /dev/null
+++ b/vendor/google/color_init.te
@@ -0,0 +1,3 @@
+type color_init, domain;
+type color_init_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(color_init) \ No newline at end of file
diff --git a/vendor/google/device.te b/vendor/google/device.te
new file mode 100644
index 0000000..7094f2f
--- /dev/null
+++ b/vendor/google/device.te
@@ -0,0 +1,12 @@
+type abc_tpu_device, dev_type;
+type airbrush_device, dev_type, mlstrustedobject;
+type airbrush_sm_device, dev_type, mlstrustedobject;
+type citadel_device, dev_type;
+type faceauth_device, dev_type;
+type ipu_device, dev_type, mlstrustedobject;
+type ramoops_device, dev_type;
+type maxfg_device, dev_type;
+type rls_device, dev_type;
+type laser_device, dev_type;
+type pwrstats_device, dev_type;
+type dp_block_device, dev_type;
diff --git a/vendor/google/face_debug.te b/vendor/google/face_debug.te
new file mode 100644
index 0000000..50e653e
--- /dev/null
+++ b/vendor/google/face_debug.te
@@ -0,0 +1 @@
+type face_debug, domain;
diff --git a/vendor/google/file.te b/vendor/google/file.te
index e265487..a5b177c 100644
--- a/vendor/google/file.te
+++ b/vendor/google/file.te
@@ -1,2 +1,39 @@
-type persist_default_file, file_type, vendor_persist_type;
-
+type persist_battery_file, file_type, vendor_persist_type;
+type persist_haptics_file, file_type, vendor_persist_type;
+type airbrush_data_file, file_type, data_file_type;
+type modem_stat_data_file, file_type, data_file_type;
+type modem_dump_file, file_type, data_file_type;
+type tcpdump_vendor_data_file, file_type, data_file_type;
+type ramoops_vendor_data_file, file_type, data_file_type, mlstrustedobject;
+type proc_touch, proc_type, fs_type, mlstrustedobject;
+type debugfs_batteryinfo, debugfs_type, fs_type;
+type sysfs_display, sysfs_type, fs_type;
+type sysfs_touch, sysfs_type, fs_type;
+type sysfs_power_stats, sysfs_type, fs_type;
+type sysfs_power_stats_ignore, sysfs_type, fs_type;
+type sysfs_camera, sysfs_type, fs_type;
+type sysfs_devcfg, sysfs_type, fs_type;
+type sysfs_msm_boardid, fs_type, sysfs_type;
+type sysfs_iio_devices, fs_type, sysfs_type;
+type sysfs_pixelstats, fs_type, sysfs_type;
+type sysfs_airbrush, sysfs_type, fs_type;
+type sysfs_wlc, sysfs_type, fs_type;
+type sysfs_pstore, sysfs_type, fs_type;
+type debugfs_f2fs, debugfs_type, fs_type;
+type proc_f2fs, proc_type, fs_type;
+type debugfs_ufs, debugfs_type, fs_type;
+type sysfs_lights, sysfs_type, fs_type;
+type sysfs_esim, sysfs_type, fs_type;
+type debugfs_usb, debugfs_type, fs_type;
+type mediadrm_vendor_data_file, file_type, data_file_type;
+type diag_socket, file_type, mlstrustedobject;
+type ese_vendor_data_file, file_type, data_file_type;
+type debugfs_dma_buf, debugfs_type, fs_type;
+type debugfs_clk, debugfs_type, fs_type;
+type debugfs_airbrush, debugfs_type, fs_type;
+type sysfs_airbrush_dumpstate, sysfs_type, fs_type;
+type debugfs_pmic, debugfs_type, fs_type;
+type sysfs_contaminant, sysfs_type, fs_type;
+type hal_neuralnetworks_darwinn_hal_camera_data_file, file_type, data_file_type;
+type camera_calibration_vendor_data_file, file_type, data_file_type;
+type sysfs_knowles_info, fs_type, sysfs_type;
diff --git a/vendor/google/file_contexts b/vendor/google/file_contexts
new file mode 100644
index 0000000..3267b57
--- /dev/null
+++ b/vendor/google/file_contexts
@@ -0,0 +1,85 @@
+# dev nodes
+/dev/ab_sm u:object_r:airbrush_sm_device:s0
+/dev/ab-dram u:object_r:airbrush_device:s0
+/dev/abc-pcie-dma u:object_r:airbrush_device:s0
+/dev/abc-pcie-tpu_0 u:object_r:abc_tpu_device:s0
+/dev/access-metadata u:object_r:ramoops_device:s0
+/dev/access-ramoops u:object_r:ramoops_device:s0
+/dev/block/zram0 u:object_r:swap_block_device:s0
+/dev/citadel0 u:object_r:citadel_device:s0
+/dev/faceauth u:object_r:faceauth_device:s0
+/dev/ipu u:object_r:ipu_device:s0
+/dev/maxfg_history u:object_r:maxfg_device:s0
+/dev/vd6281 u:object_r:rls_device:s0
+/dev/sensor_tunnel u:object_r:rls_device:s0
+/dev/st54j_se u:object_r:secure_element_device:s0
+/dev/subsys_faceauth u:object_r:faceauth_device:s0
+/dev/lm36011_flood u:object_r:laser_device:s0
+/dev/lm36011_dot u:object_r:laser_device:s0
+/dev/iaxxx-module-celldrv u:object_r:pwrstats_device:s0
+
+# system binaries
+/system/bin/hw/hardware\.google\.pixelstats@1\.0-service u:object_r:pixelstats_system_exec:s0
+/vendor/bin/pixelstats-vendor u:object_r:pixelstats_vendor_exec:s0
+
+# vendor binaries
+/vendor/bin/hw/android\.hardware\.atrace@1\.0-service.pixel u:object_r:hal_atrace_default_exec:s0
+/vendor/bin/hw/android\.hardware\.authsecret@1\.0-service\.citadel u:object_r:hal_authsecret_citadel_exec:s0
+/vendor/bin/hw/android\.hardware\.biometrics\.face@1\.0-service\.google u:object_r:hal_face_default_exec:s0
+/vendor/bin/hw/android\.hardware\.camera\.provider@2\.4-service-google u:object_r:hal_camera_default_exec:s0
+/vendor/bin/hw/android\.hardware\.health@2\.0-service\.redfin u:object_r:hal_health_default_exec:s0
+/vendor/bin/hw/android\.hardware\.keymaster@4\.0-service\.citadel u:object_r:hal_keymaster_citadel_exec:s0
+/vendor/bin/hw/android\.hardware\.neuralnetworks@1\.2-service-noronha u:object_r:hal_neuralnetworks_darwinn_exec:s0
+/vendor/bin/hw/android\.hardware\.oemlock@1\.0-service\.citadel u:object_r:hal_oemlock_citadel_exec:s0
+/vendor/bin/hw/android\.hardware\.power\.stats@1\.0-service\.pixel u:object_r:hal_power_stats_default_exec:s0
+/vendor/bin/hw/android\.hardware\.power@1\.3-service\.pixel-libperfmgr u:object_r:hal_power_default_exec:s0
+/vendor/bin/hw/android\.hardware\.secure_element@1\.0-service\.st u:object_r:hal_secure_element_default_exec:s0
+/vendor/bin/hw/android\.hardware\.thermal@2\.0-service\.pixel u:object_r:hal_thermal_default_exec:s0
+/vendor/bin/hw/android\.hardware\.usb@1\.2-service\.redfin u:object_r:hal_usb_impl_exec:s0
+/vendor/bin/hw/android\.hardware\.vibrator@1\.3-service\.redfin u:object_r:hal_vibrator_default_exec:s0
+/vendor/bin/hw/android\.hardware\.weaver@1\.0-service\.citadel u:object_r:hal_weaver_citadel_exec:s0
+/vendor/bin/hw/citadeld u:object_r:citadeld_exec:s0
+/vendor/bin/hw/init_citadel u:object_r:init_citadel_exec:s0
+/vendor/bin/hw/citadel_updater u:object_r:citadel_updater_exec:s0
+/vendor/bin/CitadelProvision u:object_r:citadel_provision_exec:s0
+/vendor/bin/hw/hardware\.google\.light@1\.0-service u:object_r:hal_light_default_exec:s0
+/vendor/bin/hw/vendor\.google\.airbrush@1\.0-service u:object_r:airbrush_exec:s0
+/vendor/bin/hw/vendor\.google\.radioext@1\.0-service u:object_r:hal_radioext_default_exec:s0
+/vendor/bin/hw/wait_for_strongbox u:object_r:wait_for_strongbox_exec:s0
+/vendor/bin/init\.firstboot\.sh u:object_r:init-firstboot_exec:s0
+/vendor/bin/init\.insmod\.sh u:object_r:init-insmod-sh_exec:s0
+/vendor/bin/color_init u:object_r:color_init_exec:s0
+/vendor/bin/init\.ramoops\.sh u:object_r:ramoops_exec:s0
+/vendor/bin/modem_svc u:object_r:modem_svc_exec:s0
+/vendor/bin/ramoops u:object_r:ramoops_exec:s0
+/vendor/bin/hw/android\.hardware\.dumpstate@1\.0-service\.redfin u:object_r:hal_dumpstate_impl_exec:s0
+/vendor/bin/ramdump u:object_r:ramdump_exec:s0
+/vendor/bin/rlsservice u:object_r:rlsservice_exec:s0
+/vendor/bin/init\.radio\.sh u:object_r:init_radio_exec:s0
+/vendor/bin/hw/vendor\.google\.wifi_ext@1\.0-service-vendor u:object_r:hal_wifi_ext_exec:s0
+/vendor/bin/tcpdump_logger u:object_r:tcpdump_logger_exec:s0
+/vendor/bin/hw/vendor\.google\.wireless_charger@1\.0-service-vendor u:object_r:hal_wlc_exec:s0
+/vendor/bin/hw/android\.hardware\.graphics\.composer@2\.3-service-sm8150 u:object_r:hal_graphics_composer_default_exec:s0
+/vendor/bin/hw/init_dp.sh u:object_r:init_dp_exec:s0
+
+# Vendor libs that are exposed to apps (those listed in /vendor/etc/public.libraries.txt
+# and their dependencies)
+/vendor/lib(64)?/libairbrush-pixel\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/vendor\.google\.airbrush\.manager@1\.0\.so u:object_r:same_process_hal_file:s0
+
+/mnt/vendor/persist/battery(/.*)? u:object_r:persist_battery_file:s0
+/mnt/vendor/persist/haptics(/.*)? u:object_r:persist_haptics_file:s0
+
+# data files
+/data/vendor/hardware/airbrush/manager(/.*)? u:object_r:airbrush_data_file:s0
+/data/vendor/modem_stat/debug\.txt u:object_r:modem_stat_data_file:s0
+/data/vendor/modem_dump(/.*)? u:object_r:modem_dump_file:s0
+/data/vendor/tcpdump_logger(/.*)? u:object_r:tcpdump_vendor_data_file:s0
+/data/vendor_ce/[0-9]+/ramoops(/.*)? u:object_r:ramoops_vendor_data_file:s0
+/data/vendor/ese(/.*)? u:object_r:ese_vendor_data_file:s0
+/data/vendor/hal_neuralnetworks_darwinn/hal_camera(/.*)? u:object_r:hal_neuralnetworks_darwinn_hal_camera_data_file:s0
+/data/vendor/camera_calibration(/.*)? u:object_r:camera_calibration_vendor_data_file:s0
+/data/vendor/face(/.*)? u:object_r:face_vendor_data_file:s0
+
+# dev socket node
+/dev/socket/diag_router u:object_r:diag_socket:s0
diff --git a/vendor/google/genfs_contexts b/vendor/google/genfs_contexts
new file mode 100644
index 0000000..1135390
--- /dev/null
+++ b/vendor/google/genfs_contexts
@@ -0,0 +1,162 @@
+genfscon debugfs /f2fs u:object_r:debugfs_f2fs:s0
+genfscon debugfs /ufshcd0 u:object_r:debugfs_ufs:s0
+genfscon proc /sys/kernel/sched_boost u:object_r:proc_sysctl_schedboost:s0
+genfscon sysfs /devices/soc0 u:object_r:sysfs_soc:s0
+genfscon sysfs /devices/platform/soc/1d84000.ufshc/slowio_read_cnt u:object_r:sysfs_scsi_devices_0000:s0
+genfscon sysfs /devices/platform/soc/1d84000.ufshc/slowio_write_cnt u:object_r:sysfs_scsi_devices_0000:s0
+genfscon sysfs /devices/platform/soc/1d84000.ufshc/slowio_unmap_cnt u:object_r:sysfs_scsi_devices_0000:s0
+genfscon sysfs /devices/platform/soc/1d84000.ufshc/slowio_sync_cnt u:object_r:sysfs_scsi_devices_0000:s0
+genfscon sysfs /devices/platform/soc/1d84000.ufshc/manual_gc u:object_r:sysfs_scsi_devices_0000:s0
+genfscon proc /sys/vm/swappiness u:object_r:proc_swappiness:s0
+genfscon proc /fs/f2fs u:object_r:proc_f2fs:s0
+genfscon proc /irq u:object_r:proc_irq:s0
+genfscon sysfs /bus/iio/devices u:object_r:sysfs_iio_devices:s0
+
+# Touch
+genfscon sysfs /devices/platform/soc/890000.spi/spi_master/spi1/spi1.0 u:object_r:sysfs_touch:s0
+genfscon proc /fts/driver_test u:object_r:proc_touch:s0
+
+# PowerHal
+genfscon sysfs /devices/platform/soc/ae00000.qcom,mdss_mdp u:object_r:sysfs_msm_subsys:s0
+genfscon sysfs /devices/platform/soc/2c00000.qcom,kgsl-3d0 u:object_r:sysfs_msm_subsys:s0
+genfscon sysfs /devices/platform/soc/soc:qcom,gpubw u:object_r:sysfs_msm_subsys:s0
+genfscon sysfs /devices/platform/soc/soc:qcom,gpubw/devfreq u:object_r:sysfs_msm_subsys:s0
+genfscon sysfs /devices/platform/soc/soc:qcom,cpu-cpu-llcc-bw u:object_r:sysfs_msm_subsys:s0
+genfscon sysfs /devices/platform/soc/soc:qcom,cpu-cpu-llcc-bw/devfreq u:object_r:sysfs_msm_subsys:s0
+genfscon sysfs /devices/platform/soc/soc:qcom,cpu-llcc-ddr-bw u:object_r:sysfs_msm_subsys:s0
+genfscon sysfs /devices/platform/soc/soc:qcom,cpu-llcc-ddr-bw/devfreq u:object_r:sysfs_msm_subsys:s0
+genfscon sysfs /devices/platform/soc/soc:qcom,cpu0-cpu-l3-lat u:object_r:sysfs_msm_subsys:s0
+genfscon sysfs /devices/platform/soc/soc:qcom,cpu4-cpu-l3-lat u:object_r:sysfs_msm_subsys:s0
+genfscon sysfs /devices/platform/soc/soc:qcom,cpu0-cpu-l3-lat/devfreq u:object_r:sysfs_msm_subsys:s0
+genfscon sysfs /devices/platform/soc/soc:qcom,cpu4-cpu-l3-lat/devfreq u:object_r:sysfs_msm_subsys:s0
+genfscon sysfs /devices/platform/soc/1d84000.ufshc/clkgate_enable u:object_r:sysfs_scsi_devices_0000:s0
+genfscon sysfs /devices/platform/soc/1d84000.ufshc/hibern8_on_idle_enable u:object_r:sysfs_scsi_devices_0000:s0
+genfscon debugfs /sched_features u:object_r:debugfs_sched_features:s0
+
+# PowerStatsHal
+genfscon sysfs /power/system_sleep/stats u:object_r:sysfs_power_stats:s0
+genfscon sysfs /power/rpmh_stats/master_stats u:object_r:sysfs_power_stats:s0
+genfscon sysfs /kernel/wlan/power_stats u:object_r:sysfs_power_stats:s0
+genfscon sysfs /devices/platform/soc/soc:abc-sm/state_stats
+u:object_r:sysfs_power_stats:s0
+genfscon sysfs /devices/platform/soc/880000.i2c/i2c-1/1-0010/iio:device3
+u:object_r:sysfs_power_stats:s0
+genfscon sysfs /devices/platform/soc/880000.i2c/i2c-1/1-0011/iio:device3
+u:object_r:sysfs_power_stats:s0
+genfscon sysfs /devices/platform/soc/a84000.i2c/i2c-2/2-0010/iio:device4
+u:object_r:sysfs_power_stats:s0
+genfscon sysfs /devices/platform/soc/89c000.i2c/i2c-2/2-0011/iio:device3
+u:object_r:sysfs_power_stats:s0
+genfscon sysfs /devices/platform/soc/a84000.i2c/i2c-3/3-0010/iio:device4
+u:object_r:sysfs_power_stats:s0
+genfscon sysfs /devices/platform/soc/a84000.i2c/i2c-2/2-0008/power_stats
+u:object_r:sysfs_power_stats:s0
+genfscon sysfs /devices/platform/soc/a84000.i2c/i2c-3/3-0008/power_stats
+u:object_r:sysfs_power_stats:s0
+
+# Not used by PowerStatsHal
+genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-00/c440000.qcom,spmi:qcom,pm8150@0:vadc@3100/iio:device0
+u:object_r:sysfs_power_stats_ignore:s0
+genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-02/c440000.qcom,spmi:qcom,pm8150b@2:vadc@3100/iio:device1
+u:object_r:sysfs_power_stats_ignore:s0
+genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-04/c440000.qcom,spmi:qcom,pm8150l@4:vadc@3100/iio:device2
+u:object_r:sysfs_power_stats_ignore:s0
+
+# Display
+genfscon sysfs /devices/platform/soc/soc:qcom,dsi-display-primary/backlight u:object_r:sysfs_leds:s0
+genfscon sysfs /devices/platform/soc/soc:qcom,dsi-display-primary/backlight/panel0-backlight/vr_mode u:object_r:sysfs_lights:s0
+genfscon sysfs /devices/platform/soc/soc:qcom,dsi-display-primary/panel_info u:object_r:sysfs_display:s0
+
+# PMIC
+genfscon debugfs /regmap/spmi0-05/address u:object_r:debugfs_pmic:s0
+genfscon debugfs /regmap/spmi0-05/count u:object_r:debugfs_pmic:s0
+genfscon debugfs /regmap/spmi0-05/data u:object_r:debugfs_pmic:s0
+
+# Vibrator
+# EVT 1.0 and older
+genfscon sysfs /devices/platform/soc/c94000.i2c/i2c-3/3-0043 u:object_r:sysfs_vibrator:s0
+# EVT 1.1 and newer
+genfscon sysfs /devices/platform/soc/c94000.i2c/i2c-4/4-0043 u:object_r:sysfs_vibrator:s0
+
+# Camera
+genfscon sysfs /devices/platform/soc/ac4a000.qcom,cci u:object_r:sysfs_camera:s0
+genfscon sysfs /devices/platform/soc/ac4b000.qcom,cci u:object_r:sysfs_camera:s0
+
+# Device config (device build)
+genfscon sysfs /firmware/devicetree/base/chosen/cdt/cdb2/devcfg u:object_r:sysfs_devcfg:s0
+
+# eSIM status
+genfscon sysfs /firmware/devicetree/base/chosen/cdt/cdb2/esim u:object_r:sysfs_esim:s0
+
+# Battery
+genfscon sysfs /devices/platform/soc/soc:google,battery/power_supply/battery u:object_r:sysfs_batteryinfo:s0
+genfscon sysfs /devices/platform/soc/880000.i2c/i2c-1/1-0036/power_supply/maxfg u:object_r:sysfs_batteryinfo:s0
+genfscon sysfs /devices/platform/soc/89c000.i2c/i2c-2/2-0036/power_supply/maxfg u:object_r:sysfs_batteryinfo:s0
+genfscon sysfs /devices/platform/soc/880000.i2c/i2c-1/1-0061 u:object_r:sysfs_wlc:s0
+genfscon sysfs /devices/platform/soc/880000.i2c/i2c-1/1-0061/power_supply u:object_r:sysfs_batteryinfo:s0
+genfscon sysfs /devices/platform/soc/880000.i2c/i2c-1/1-0061/power_supply/wireless u:object_r:sysfs_batteryinfo:s0
+genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-02/c440000.qcom,spmi:qcom,pm8150b@2:google,bms/power_supply/charger u:object_r:sysfs_batteryinfo:s0
+genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-02/c440000.qcom,spmi:qcom,pm8150b@2:qcom,usb-pdphy@1700/usbpd0/power_supply u:object_r:sysfs_batteryinfo:s0
+genfscon debugfs /regmap/1-0036/ u:object_r:debugfs_batteryinfo:s0
+genfscon debugfs /regmap/1-000b/ u:object_r:debugfs_batteryinfo:s0
+genfscon debugfs /regmap/2-0036/ u:object_r:debugfs_batteryinfo:s0
+genfscon debugfs /regmap/2-000b/ u:object_r:debugfs_batteryinfo:s0
+genfscon debugfs /logbuffer/ssoc u:object_r:debugfs_batteryinfo:s0
+genfscon debugfs /logbuffer/batt_ce u:object_r:debugfs_batteryinfo:s0
+genfscon debugfs /logbuffer/wireless u:object_r:debugfs_batteryinfo:s0
+genfscon debugfs /google_charger u:object_r:debugfs_batteryinfo:s0
+genfscon debugfs /google_battery u:object_r:debugfs_batteryinfo:s0
+
+# Pixelstats
+genfscon sysfs /devices/virtual/misc/msm_cirrus_playback/resistance_left_right u:object_r:sysfs_pixelstats:s0
+genfscon sysfs /devices/platform/soc/soc:google,overheat_mitigation u:object_r:sysfs_pixelstats:s0
+genfscon sysfs /devices/platform/soc/a8c000.spi/spi_master/spi4/spi4.0/iaxxx-dev/iaxxx_misc/codec_state u:object_r:sysfs_pixelstats:s0
+genfscon sysfs /devices/platform/soc/a8c000.spi/spi_master/spi4/spi4.0/iaxxx-dev/iaxxx_misc/wdsp_stat u:object_r:sysfs_pixelstats:s0
+genfscon sysfs /devices/platform/soc/a8c000.spi/spi_master/spi5/spi5.0/iaxxx-dev/iaxxx_misc/codec_state u:object_r:sysfs_pixelstats:s0
+genfscon sysfs /devices/platform/soc/a8c000.spi/spi_master/spi5/spi5.0/iaxxx-dev/iaxxx_misc/wdsp_stat u:object_r:sysfs_pixelstats:s0
+
+# Audio Dsp for HardwareInfo
+genfscon sysfs /devices/platform/soc/a8c000.spi/spi_master/spi4/spi4.0/iaxxx-dev/iaxxx_misc/hwinfo_part_number u:object_r:sysfs_audio:s0
+genfscon sysfs /devices/platform/soc/a8c000.spi/spi_master/spi5/spi5.0/iaxxx-dev/iaxxx_misc/hwinfo_part_number u:object_r:sysfs_audio:s0
+
+# Knowles framework info
+genfscon sysfs /devices/platform/soc/a8c000.spi/spi_master/spi5/spi5.0/iaxxx/fw_version u:object_r:sysfs_knowles_info:s0
+genfscon sysfs /devices/platform/soc/a8c000.spi/spi_master/spi5/spi5.0/iaxxx/host_version u:object_r:sysfs_knowles_info:s0
+genfscon sysfs /devices/platform/soc/a8c000.spi/spi_master/spi5/spi5.0/iaxxx/package_version u:object_r:sysfs_knowles_info:s0
+genfscon sysfs /devices/platform/soc/a8c000.spi/spi_master/spi5/spi5.0/iaxxx/plugin_version u:object_r:sysfs_knowles_info:s0
+
+# init_citadel might need to read this
+genfscon sysfs /firmware/devicetree/base/qcom,board-id u:object_r:sysfs_msm_boardid:s0
+
+# USB
+genfscon debugfs /tcpm/usbpd0 u:object_r:debugfs_usb:s0
+genfscon debugfs /logbuffer/usbpd u:object_r:debugfs_usb:s0
+genfscon debugfs /logbuffer/smblib u:object_r:debugfs_usb:s0
+genfscon debugfs /logbuffer/pps u:object_r:debugfs_usb:s0
+
+# Airbrush
+genfscon sysfs /devices/platform/soc/soc:abc-sm u:object_r:sysfs_airbrush:s0
+genfscon sysfs /devices/platform/soc/c84000.i2c/i2c-4/4-0066 u:object_r:sysfs_airbrush_dumpstate:s0
+genfscon sysfs /devices/platform/soc/c84000.i2c/i2c-5/5-0066 u:object_r:sysfs_airbrush_dumpstate:s0
+genfscon debugfs /faceauth u:object_r:debugfs_airbrush:s0
+genfscon debugfs /airbrush u:object_r:debugfs_airbrush:s0
+
+# Dumpstate hal
+genfscon debugfs /dma_buf/bufinfo u:object_r:debugfs_dma_buf:s0
+genfscon debugfs /dma_buf/dmaprocs u:object_r:debugfs_dma_buf:s0
+
+# Power
+genfscon debugfs /clk/debug_suspend u:object_r:debugfs_clk:s0
+
+# ramoops
+genfscon sysfs /devices/virtual/ramoops/pstore/aes_key u:object_r:sysfs_pstore:s0
+genfscon sysfs /devices/virtual/ramoops/pstore/aes_key_iv u:object_r:sysfs_pstore:s0
+genfscon sysfs /devices/virtual/ramoops/pstore/aes_key_tag u:object_r:sysfs_pstore:s0
+genfscon sysfs /devices/virtual/ramoops/pstore/use_alt u:object_r:sysfs_pstore:s0
+
+# pmic
+genfscon debugfs /pmic-votable u:object_r:debugfs_pmic:s0
+
+# USB contaminant detection
+genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-02/c440000.qcom,spmi:qcom,pm8150b@2:qcom,qpnp-smb5/power_supply/usb/moisture_detected u:object_r:sysfs_contaminant:s0
+genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-02/c440000.qcom,spmi:qcom,pm8150b@2:qcom,qpnp-smb5/power_supply/usb/moisture_detection_enabled u:object_r:sysfs_contaminant:s0
diff --git a/vendor/google/google_touch_app.te b/vendor/google/google_touch_app.te
new file mode 100644
index 0000000..526a6b2
--- /dev/null
+++ b/vendor/google/google_touch_app.te
@@ -0,0 +1 @@
+type google_touch_app, domain;
diff --git a/vendor/google/grilservice_app.te b/vendor/google/grilservice_app.te
new file mode 100644
index 0000000..e465b9a
--- /dev/null
+++ b/vendor/google/grilservice_app.te
@@ -0,0 +1 @@
+type grilservice_app, domain;
diff --git a/vendor/google/hal_authsecret_citadel.te b/vendor/google/hal_authsecret_citadel.te
new file mode 100644
index 0000000..5ce4d10
--- /dev/null
+++ b/vendor/google/hal_authsecret_citadel.te
@@ -0,0 +1,3 @@
+type hal_authsecret_citadel, domain;
+type hal_authsecret_citadel_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_authsecret_citadel) \ No newline at end of file
diff --git a/vendor/google/hal_dumpstate_impl.te b/vendor/google/hal_dumpstate_impl.te
new file mode 100644
index 0000000..38fb2ec
--- /dev/null
+++ b/vendor/google/hal_dumpstate_impl.te
@@ -0,0 +1,3 @@
+type hal_dumpstate_impl, domain;
+type hal_dumpstate_impl_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_dumpstate_impl) \ No newline at end of file
diff --git a/vendor/google/hal_keymaster_citadel.te b/vendor/google/hal_keymaster_citadel.te
new file mode 100644
index 0000000..6999d55
--- /dev/null
+++ b/vendor/google/hal_keymaster_citadel.te
@@ -0,0 +1,3 @@
+type hal_keymaster_citadel, domain;
+type hal_keymaster_citadel_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_keymaster_citadel) \ No newline at end of file
diff --git a/vendor/google/hal_neuralnetworks_darwinn.te b/vendor/google/hal_neuralnetworks_darwinn.te
new file mode 100644
index 0000000..204b6f0
--- /dev/null
+++ b/vendor/google/hal_neuralnetworks_darwinn.te
@@ -0,0 +1,3 @@
+type hal_neuralnetworks_darwinn, domain;
+type hal_neuralnetworks_darwinn_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_neuralnetworks_darwinn) \ No newline at end of file
diff --git a/vendor/google/hal_oemlock_citadel.te b/vendor/google/hal_oemlock_citadel.te
new file mode 100644
index 0000000..a72e6e0
--- /dev/null
+++ b/vendor/google/hal_oemlock_citadel.te
@@ -0,0 +1,3 @@
+type hal_oemlock_citadel, domain;
+type hal_oemlock_citadel_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_oemlock_citadel) \ No newline at end of file
diff --git a/vendor/google/hal_radioext_default.te b/vendor/google/hal_radioext_default.te
new file mode 100644
index 0000000..9d4f8a2
--- /dev/null
+++ b/vendor/google/hal_radioext_default.te
@@ -0,0 +1,3 @@
+type hal_radioext_default, domain;
+type hal_radioext_default_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_radioext_default) \ No newline at end of file
diff --git a/vendor/google/hal_usb_impl.te b/vendor/google/hal_usb_impl.te
new file mode 100644
index 0000000..8c58631
--- /dev/null
+++ b/vendor/google/hal_usb_impl.te
@@ -0,0 +1,3 @@
+type hal_usb_impl, domain;
+type hal_usb_impl_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_usb_impl) \ No newline at end of file
diff --git a/vendor/google/hal_weaver_citadel.te b/vendor/google/hal_weaver_citadel.te
new file mode 100644
index 0000000..c473dce
--- /dev/null
+++ b/vendor/google/hal_weaver_citadel.te
@@ -0,0 +1,3 @@
+type hal_weaver_citadel, domain;
+type hal_weaver_citadel_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_weaver_citadel) \ No newline at end of file
diff --git a/vendor/google/hal_wifi_ext.te b/vendor/google/hal_wifi_ext.te
new file mode 100644
index 0000000..63a4398
--- /dev/null
+++ b/vendor/google/hal_wifi_ext.te
@@ -0,0 +1,3 @@
+type hal_wifi_ext, domain;
+type hal_wifi_ext_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_wifi_ext) \ No newline at end of file
diff --git a/vendor/google/hal_wlc.te b/vendor/google/hal_wlc.te
new file mode 100644
index 0000000..1b524a3
--- /dev/null
+++ b/vendor/google/hal_wlc.te
@@ -0,0 +1,3 @@
+type hal_wlc, domain;
+type hal_wlc_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_wlc) \ No newline at end of file
diff --git a/vendor/google/hwservice.te b/vendor/google/hwservice.te
new file mode 100644
index 0000000..4c82501
--- /dev/null
+++ b/vendor/google/hwservice.te
@@ -0,0 +1,6 @@
+type hal_pixelstats_hwservice, hwservice_manager_type;
+type hal_airbrush_hwservice, hwservice_manager_type;
+type hal_darwinn_hwservice, hwservice_manager_type;
+type hal_radioext_hwservice, hwservice_manager_type;
+type hal_wifi_ext_hwservice, hwservice_manager_type;
+type hal_wlc_hwservice, hwservice_manager_type;
diff --git a/vendor/google/hwservice_contexts b/vendor/google/hwservice_contexts
new file mode 100644
index 0000000..4d2e8fd
--- /dev/null
+++ b/vendor/google/hwservice_contexts
@@ -0,0 +1,7 @@
+hardware.google.pixelstats::IPixelStats u:object_r:hal_pixelstats_hwservice:s0
+hardware.google.light::ILight u:object_r:hal_light_hwservice:s0
+vendor.google.airbrush.manager::IAirbrushManager u:object_r:hal_airbrush_hwservice:s0
+vendor.google.darwinn.service::IDarwinnService u:object_r:hal_darwinn_hwservice:s0
+vendor.google.radioext::IRadioExt u:object_r:hal_radioext_hwservice:s0
+vendor.google.wifi_ext::IWifiExt u:object_r:hal_wifi_ext_hwservice:s0
+vendor.google.wireless_charger::IWirelessCharger u:object_r:hal_wlc_hwservice:s0
diff --git a/vendor/google/init-firstboot.te b/vendor/google/init-firstboot.te
new file mode 100644
index 0000000..0e279cd
--- /dev/null
+++ b/vendor/google/init-firstboot.te
@@ -0,0 +1,3 @@
+type init-firstboot, domain;
+type init-firstboot_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(init-firstboot) \ No newline at end of file
diff --git a/vendor/google/init-insmod-sh.te b/vendor/google/init-insmod-sh.te
new file mode 100644
index 0000000..44e3f83
--- /dev/null
+++ b/vendor/google/init-insmod-sh.te
@@ -0,0 +1,3 @@
+type init-insmod-sh, domain;
+type init-insmod-sh_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(init-insmod-sh) \ No newline at end of file
diff --git a/vendor/google/init_citadel.te b/vendor/google/init_citadel.te
new file mode 100644
index 0000000..604cbe0
--- /dev/null
+++ b/vendor/google/init_citadel.te
@@ -0,0 +1,4 @@
+type init_citadel, domain;
+type init_citadel_exec, exec_type, vendor_file_type, file_type;
+type citadel_updater_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(init_citadel) \ No newline at end of file
diff --git a/vendor/google/init_dp.te b/vendor/google/init_dp.te
new file mode 100644
index 0000000..66b1488
--- /dev/null
+++ b/vendor/google/init_dp.te
@@ -0,0 +1,3 @@
+type init_dp, domain;
+type init_dp_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(init_dp) \ No newline at end of file
diff --git a/vendor/google/init_radio.te b/vendor/google/init_radio.te
new file mode 100644
index 0000000..dda8b86
--- /dev/null
+++ b/vendor/google/init_radio.te
@@ -0,0 +1,3 @@
+type init_radio, domain;
+type init_radio_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(init_radio) \ No newline at end of file
diff --git a/vendor/google/keys.conf b/vendor/google/keys.conf
new file mode 100644
index 0000000..62d08f2
--- /dev/null
+++ b/vendor/google/keys.conf
@@ -0,0 +1,6 @@
+[@GOOGLE]
+ALL : device/google/coral-sepolicy/vendor/google/certs/app.x509.pem
+
+[@GOOGLEPULSE]
+ALL : device/google/coral-sepolicy/vendor/google/certs/pulse-release.x509.pem
+
diff --git a/vendor/google/logger_app.te b/vendor/google/logger_app.te
new file mode 100644
index 0000000..0fbdf59
--- /dev/null
+++ b/vendor/google/logger_app.te
@@ -0,0 +1 @@
+type logger_app, domain;
diff --git a/vendor/google/mac_permissions.xml b/vendor/google/mac_permissions.xml
new file mode 100644
index 0000000..9d8d8d4
--- /dev/null
+++ b/vendor/google/mac_permissions.xml
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="utf-8"?>
+<policy>
+
+<!--
+
+ * A signature is a hex encoded X.509 certificate or a tag defined in
+ keys.conf and is required for each signer tag.
+ * A signer tag may contain a seinfo tag and multiple package stanzas.
+ * A default tag is allowed that can contain policy for all apps not signed with a
+ previously listed cert. It may not contain any inner package stanzas.
+ * Each signer/default/package tag is allowed to contain one seinfo tag. This tag
+ represents additional info that each app can use in setting a SELinux security
+ context on the eventual process.
+ * When a package is installed the following logic is used to determine what seinfo
+ value, if any, is assigned.
+ - All signatures used to sign the app are checked first.
+ - If a signer stanza has inner package stanzas, those stanza will be checked
+ to try and match the package name of the app. If the package name matches
+ then that seinfo tag is used. If no inner package matches then the outer
+ seinfo tag is assigned.
+ - The default tag is consulted last if needed.
+-->
+ <!-- google apps key -->
+ <signer signature="@GOOGLE" >
+ <seinfo value="google" />
+ </signer>
+ <signer signature="@GOOGLEPULSE" >
+ <seinfo value="googlepulse" />
+ </signer>
+</policy>
diff --git a/vendor/google/modem_diagnostics.te b/vendor/google/modem_diagnostics.te
new file mode 100644
index 0000000..696c35c
--- /dev/null
+++ b/vendor/google/modem_diagnostics.te
@@ -0,0 +1,2 @@
+type modem_diagnostic_app, domain;
+type modem_diagnostic_app_tmpfs, file_type;
diff --git a/vendor/google/modem_svc.te b/vendor/google/modem_svc.te
new file mode 100644
index 0000000..ee2f5c2
--- /dev/null
+++ b/vendor/google/modem_svc.te
@@ -0,0 +1,3 @@
+type modem_svc, domain;
+type modem_svc_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(modem_svc) \ No newline at end of file
diff --git a/vendor/google/oslo_app.te b/vendor/google/oslo_app.te
new file mode 100644
index 0000000..12ead56
--- /dev/null
+++ b/vendor/google/oslo_app.te
@@ -0,0 +1 @@
+type oslo_app, domain;
diff --git a/vendor/google/pixelstats.te b/vendor/google/pixelstats.te
new file mode 100644
index 0000000..1a53fe7
--- /dev/null
+++ b/vendor/google/pixelstats.te
@@ -0,0 +1,2 @@
+hal_attribute(pixelstats)type pixelstats_system, domain, coredomain;
+init_daemon_domain(pixelstats_system)type pixelstats_system_exec, exec_type, file_type, system_file_type;
diff --git a/vendor/google/pixelstats_vendor.te b/vendor/google/pixelstats_vendor.te
new file mode 100644
index 0000000..b503d28
--- /dev/null
+++ b/vendor/google/pixelstats_vendor.te
@@ -0,0 +1,3 @@
+type pixelstats_vendor, domain;
+type pixelstats_vendor_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(pixelstats_vendor) \ No newline at end of file
diff --git a/vendor/google/property.te b/vendor/google/property.te
new file mode 100644
index 0000000..12f70f6
--- /dev/null
+++ b/vendor/google/property.te
@@ -0,0 +1,11 @@
+type vendor_thermal_prop, property_type;
+type power_prop, property_type;
+type vendor_tcpdump_log_prop, property_type;
+type vendor_faceauth_prop, property_type;
+type vendor_build_type_prop, property_type;
+type vendor_aware_available_prop, property_type;
+type vendor_modem_prop, property_type;
+type camera_ro_prop, property_type;
+type vendor_ramoops_prop, property_type;
+type ecoservice_prop, property_type;
+type vendor_shutdown_prop, property_type;
diff --git a/vendor/google/property_contexts b/vendor/google/property_contexts
new file mode 100644
index 0000000..7e71b5a
--- /dev/null
+++ b/vendor/google/property_contexts
@@ -0,0 +1,71 @@
+persist.vendor.radio.RATE_ADAPT_ENABLE u:object_r:vendor_radio_prop:s0
+persist.vendor.radio.ROTATION_ENABLE u:object_r:vendor_radio_prop:s0
+persist.vendor.radio.VT_ENABLE u:object_r:vendor_radio_prop:s0
+persist.vendor.radio.VT_HYBRID_ENABLE u:object_r:vendor_radio_prop:s0
+persist.vendor.radio.videopause.mode u:object_r:vendor_radio_prop:s0
+persist.vendor.radio.smlog_switch u:object_r:vendor_radio_prop:s0
+
+ro.vendor.radio.log_loc u:object_r:vendor_radio_prop:s0
+ro.vendor.radio.log_prefix u:object_r:vendor_radio_prop:s0
+
+persist.audio.fluence.voicecomm u:object_r:vendor_audio_prop:s0
+audio.adm.buffering.ms u:object_r:vendor_audio_prop:s0
+
+vendor.all.modules.ready u:object_r:vendor_device_prop:s0
+vendor.all.devices.ready u:object_r:vendor_device_prop:s0
+vendor.thermal.config u:object_r:vendor_thermal_prop:s0
+
+ro.boot.usbcontroller u:object_r:vendor_usb_prop:s0
+
+ro.boot.hardware.platform u:object_r:public_vendor_default_prop:s0
+
+vendor.powerhal.state u:object_r:power_prop:s0
+vendor.powerhal.audio u:object_r:power_prop:s0
+vendor.powerhal.lpm u:object_r:power_prop:s0
+vendor.powerhal.init u:object_r:power_prop:s0
+vendor.powerhal.rendering u:object_r:power_prop:s0
+
+vendor.display.primary_red u:object_r:vendor_display_prop:s0
+vendor.display.primary_green u:object_r:vendor_display_prop:s0
+vendor.display.primary_blue u:object_r:vendor_display_prop:s0
+vendor.display.primary_white u:object_r:vendor_display_prop:s0
+vendor.display.native_display_primaries_ready u:object_r:vendor_display_prop:s0
+# Tcpdump_logger
+persist.vendor.tcpdump.log.alwayson u:object_r:vendor_tcpdump_log_prop:s0
+vendor.tcpdump.log.ondemand u:object_r:vendor_tcpdump_log_prop:s0
+vendor.tcpdump.log.alwayson u:object_r:vendor_tcpdump_log_prop:s0
+vendor.tcpdump.output.dir u:object_r:vendor_tcpdump_log_prop:s0
+
+#face HAL
+vendor.faceauth.debug u:object_r:vendor_faceauth_prop:s0
+vendor.faceauth.debug_entries u:object_r:vendor_faceauth_prop:s0
+vendor.faceauth.fake_camera_path u:object_r:vendor_faceauth_prop:s0
+vendor.faceauth.smudge_ux_threshold u:object_r:vendor_faceauth_prop:s0
+vendor.faceauth.trace u:object_r:vendor_faceauth_prop:s0
+vendor.faceauth.use_fake_camera u:object_r:vendor_faceauth_prop:s0
+vendor.faceauth.use_secure_camera u:object_r:vendor_faceauth_prop:s0
+
+persist.vendor.faceauth.use_disk_cache u:object_r:vendor_faceauth_prop:s0
+persist.vendor.faceauth.require_calibration u:object_r:vendor_faceauth_prop:s0
+persist.vendor.faceauth.run_autocal u:object_r:vendor_faceauth_prop:s0
+persist.vendor.faceauth.run_autocal_on_success u:object_r:vendor_faceauth_prop:s0
+persist.vendor.faceauth.split_autocal u:object_r:vendor_faceauth_prop:s0
+persist.vendor.faceauth.pose_bucket_stages u:object_r:vendor_faceauth_prop:s0
+persist.vendor.faceauth.selection_tuning_frames u:object_r:vendor_faceauth_prop:s0
+
+persist.vendor.shutdown. u:object_r:vendor_shutdown_prop:s0
+
+# Google camera hal read only props
+ro.vendor.camera. u:object_r:camera_ro_prop:s0
+ro.vendor.camera.res.fmq.size u:object_r:camera_ro_prop:s0
+ro.vendor.camera.req.fmq.size u:object_r:camera_ro_prop:s0
+
+ro.vendor.build.type u:object_r:vendor_build_type_prop:s0
+
+ro.vendor.aware_available u:object_r:vendor_aware_available_prop:s0
+
+persist.vendor.modem. u:object_r:vendor_modem_prop:s0
+persist.vendor.mdm. u:object_r:vendor_modem_prop:s0
+
+# ramoops
+vendor.ramoops. u:object_r:vendor_ramoops_prop:s0
diff --git a/vendor/google/ramdump.te b/vendor/google/ramdump.te
new file mode 100644
index 0000000..6f67451
--- /dev/null
+++ b/vendor/google/ramdump.te
@@ -0,0 +1,3 @@
+type ramdump_exec, exec_type, vendor_file_type, file_type;
+ type ramdump, domain;
+ init_daemon_domain(ramdump) \ No newline at end of file
diff --git a/vendor/google/ramdump_app.te b/vendor/google/ramdump_app.te
new file mode 100644
index 0000000..d918f91
--- /dev/null
+++ b/vendor/google/ramdump_app.te
@@ -0,0 +1 @@
+type ramdump_app, domain;
diff --git a/vendor/google/ramoops.te b/vendor/google/ramoops.te
new file mode 100644
index 0000000..26020d7
--- /dev/null
+++ b/vendor/google/ramoops.te
@@ -0,0 +1,3 @@
+type ramoops, domain;
+type ramoops_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(ramoops);
diff --git a/vendor/google/rlsservice.te b/vendor/google/rlsservice.te
new file mode 100644
index 0000000..0cd33fa
--- /dev/null
+++ b/vendor/google/rlsservice.te
@@ -0,0 +1,3 @@
+type rlsservice, domain;
+type rlsservice_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(rlsservice) \ No newline at end of file
diff --git a/vendor/google/seapp_contexts b/vendor/google/seapp_contexts
new file mode 100644
index 0000000..3649a87
--- /dev/null
+++ b/vendor/google/seapp_contexts
@@ -0,0 +1,24 @@
+# Domain for Ramdump
+user=system seinfo=platform name=com.google.SSRestartDetector domain=ssr_detector_app type=system_app_data_file
+user=_app seinfo=platform name=com.android.ramdump domain=ramdump_app type=app_data_file levelFrom=all
+
+# Domain for grilservice
+user=_app isPrivApp=true seinfo=platform name=com.google.android.grilservice domain=grilservice_app levelFrom=all
+
+# Domain for Modem Diagnostic System
+user=_app seinfo=google name=com.google.mds domain=modem_diagnostic_app type=app_data_file levelFrom=user
+
+# Domain for Pixel Logger
+user=_app seinfo=platform name=com.android.pixellogger domain=logger_app type=app_data_file levelFrom=all
+
+# Domain for Oslo
+user=_app seinfo=platform name=com.google.oslo domain=oslo_app type=app_data_file levelFrom=all
+
+# Domain for GoogleCBRS app
+user=_app seinfo=platform name=com.google.googlecbrs domain=cbrs_setup_app type=app_data_file levelFrom=user
+
+# Domain for FaceDebugService
+user=_app seinfo=platform name=com.google.android.facedebug domain=face_debug type=app_data_file levelFrom=all
+
+# Domain for Touch app
+user=_app seinfo=platform name=com.google.touch.touchinspector domain=google_touch_app type=app_data_file levelFrom=user
diff --git a/vendor/google/ssr_detector.te b/vendor/google/ssr_detector.te
new file mode 100644
index 0000000..a29aab0
--- /dev/null
+++ b/vendor/google/ssr_detector.te
@@ -0,0 +1 @@
+type ssr_detector_app, domain;
diff --git a/vendor/google/tcpdump_logger.te b/vendor/google/tcpdump_logger.te
new file mode 100644
index 0000000..580e39f
--- /dev/null
+++ b/vendor/google/tcpdump_logger.te
@@ -0,0 +1,3 @@
+type tcpdump_logger, domain;
+type tcpdump_logger_exec, exec_type, vendor_file_type, file_type;
+ init_daemon_domain(tcpdump_logger) \ No newline at end of file
diff --git a/vendor/google/vendor_init.te b/vendor/google/vendor_init.te
new file mode 100644
index 0000000..ca9d4a8
--- /dev/null
+++ b/vendor/google/vendor_init.te
@@ -0,0 +1 @@
+type vendor_init_exec, exec_type, vendor_file_type, file_type;
diff --git a/vendor/google/vndservice.te b/vendor/google/vndservice.te
new file mode 100644
index 0000000..8047846
--- /dev/null
+++ b/vendor/google/vndservice.te
@@ -0,0 +1,6 @@
+type citadeld_service, vndservice_manager_type;
+type rls_service, vndservice_manager_type;
+type power_stats_service, vndservice_manager_type;
+type airbrush_faceauth_service, vndservice_manager_type;
+type airbrush_tpu_service, vndservice_manager_type;
+type eco_service, vndservice_manager_type;
diff --git a/vendor/google/vndservice_contexts b/vendor/google/vndservice_contexts
new file mode 100644
index 0000000..f0744bd
--- /dev/null
+++ b/vendor/google/vndservice_contexts
@@ -0,0 +1,7 @@
+android.hardware.citadel.ICitadeld u:object_r:citadeld_service:s0
+rlsservice u:object_r:rls_service:s0
+airbrush_faceauth u:object_r:airbrush_faceauth_service:s0
+airbrush_tpu u:object_r:airbrush_tpu_service:s0
+power.stats-vendor u:object_r:power_stats_service:s0
+media.ecoservice u:object_r:eco_service:s0
+
diff --git a/vendor/google/wait_for_strongbox.te b/vendor/google/wait_for_strongbox.te
new file mode 100644
index 0000000..67a3b53
--- /dev/null
+++ b/vendor/google/wait_for_strongbox.te
@@ -0,0 +1,3 @@
+type wait_for_strongbox, domain;
+type wait_for_strongbox_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(wait_for_strongbox) \ No newline at end of file
diff --git a/vendor/qcom/common/adpl.te b/vendor/qcom/common/adpl.te
new file mode 100644
index 0000000..add435e
--- /dev/null
+++ b/vendor/qcom/common/adpl.te
@@ -0,0 +1,3 @@
+type adpl, domain;
+type adpl_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(adpl) \ No newline at end of file
diff --git a/vendor/qcom/common/adsprpcd.te b/vendor/qcom/common/adsprpcd.te
new file mode 100644
index 0000000..97ed619
--- /dev/null
+++ b/vendor/qcom/common/adsprpcd.te
@@ -0,0 +1,3 @@
+type adsprpcd, domain;
+type adsprpcd_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(adsprpcd) \ No newline at end of file
diff --git a/vendor/qcom/common/atfwd.te b/vendor/qcom/common/atfwd.te
new file mode 100644
index 0000000..d737969
--- /dev/null
+++ b/vendor/qcom/common/atfwd.te
@@ -0,0 +1,3 @@
+type atfwd, domain;
+type atfwd_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(atfwd) \ No newline at end of file
diff --git a/vendor/qcom/common/attributes b/vendor/qcom/common/attributes
index 7e6def7..9db522b 100644
--- a/vendor/qcom/common/attributes
+++ b/vendor/qcom/common/attributes
@@ -1 +1,2 @@
attribute vendor_persist_type;
+attribute hal_display_color;
diff --git a/vendor/qcom/common/audiod.te b/vendor/qcom/common/audiod.te
new file mode 100644
index 0000000..77cbe14
--- /dev/null
+++ b/vendor/qcom/common/audiod.te
@@ -0,0 +1,3 @@
+type audiod, domain;
+type audiod_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(audiod) \ No newline at end of file
diff --git a/vendor/qcom/common/cdsprpcd.te b/vendor/qcom/common/cdsprpcd.te
new file mode 100644
index 0000000..377af28
--- /dev/null
+++ b/vendor/qcom/common/cdsprpcd.te
@@ -0,0 +1,3 @@
+type cdsprpcd, domain;
+type cdsprpcd_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(cdsprpcd) \ No newline at end of file
diff --git a/vendor/qcom/common/charger_monitor.te b/vendor/qcom/common/charger_monitor.te
new file mode 100644
index 0000000..e463d9b
--- /dev/null
+++ b/vendor/qcom/common/charger_monitor.te
@@ -0,0 +1,3 @@
+type charger_monitor, domain;
+type charger_monitor_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(charger_monitor) \ No newline at end of file
diff --git a/vendor/qcom/common/chre.te b/vendor/qcom/common/chre.te
new file mode 100644
index 0000000..7023e73
--- /dev/null
+++ b/vendor/qcom/common/chre.te
@@ -0,0 +1,3 @@
+type chre, domain;
+type chre_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(chre) \ No newline at end of file
diff --git a/vendor/qcom/common/cnd.te b/vendor/qcom/common/cnd.te
new file mode 100644
index 0000000..bdff456
--- /dev/null
+++ b/vendor/qcom/common/cnd.te
@@ -0,0 +1,3 @@
+type cnd, domain, mlstrustedsubject;
+type cnd_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(cnd)
diff --git a/vendor/qcom/common/con_monitor.te b/vendor/qcom/common/con_monitor.te
new file mode 100644
index 0000000..db7009b
--- /dev/null
+++ b/vendor/qcom/common/con_monitor.te
@@ -0,0 +1 @@
+type con_monitor_app, domain;
diff --git a/vendor/qcom/common/device.te b/vendor/qcom/common/device.te
new file mode 100644
index 0000000..57c0ff7
--- /dev/null
+++ b/vendor/qcom/common/device.te
@@ -0,0 +1,69 @@
+type diag_device, dev_type, mlstrustedobject;
+type smem_log_device, dev_type;
+type hsic_device, dev_type;
+type mhi_device, dev_type;
+type bhi_device, dev_type;
+type smd_device, dev_type;
+type rmnet_device, dev_type;
+type thermal_device, dev_type;
+type vm_bms_device, dev_type;
+type battery_data_device, dev_type;
+type qdsp_device, dev_type, mlstrustedobject;
+type dsp_device, dev_type;
+type xdsp_device, dev_type;
+type hvdcp_device, dev_type;
+type device_latency, dev_type;
+type fm_radio_device, dev_type;
+type modem_efs_partition_device, dev_type;
+type ssd_device, dev_type;
+type rpmb_device, dev_type;
+type sg_device, dev_type;
+type dip_device, dev_type;
+type mdtp_device, dev_type;
+type sd_device, dev_type;
+type ssd_block_device, dev_type;
+type esoc_device, dev_type;
+type ssr_device, dev_type;
+type ramdump_device, dev_type;
+type ksbridgehsic_device, dev_type;
+type efsbridgehsic_device, dev_type;
+type efs_boot_dev, dev_type;
+type mba_debug_dev, dev_type;
+type logdump_partition, dev_type;
+type bootselect_device, dev_type;
+type usb_uicc_device, dev_type;
+type ipa_dev, dev_type;
+type wcnss_device, dev_type;
+type spcom_device, dev_type;
+type skp_device, dev_type;
+type sp_ssr_device, dev_type;
+type sp_keymaster_device, dev_type;
+type sec_nvm_device, dev_type;
+type cryptoapp_device, dev_type;
+type spdaemon_ssr_device, dev_type;
+type modem_ssr_device, dev_type;
+type qsee_ipc_irq_spss_device, dev_type;
+type qdss_device, dev_type;
+type gadget_serial_device, dev_type;
+type pta_device, dev_type;
+type bu21150_device, dev_type;
+type hbtp_device, dev_type;
+type qce_device, dev_type;
+type rng_device, dev_type;
+type system_health_monitor_device, dev_type;
+type usf_device, dev_type;
+type qbt1000_device, dev_type;
+type avtimer_device, dev_type;
+type at_device, dev_type;
+type bt_device, dev_type;
+type wlan_device, dev_type;
+type rawdump_block_device, dev_type;
+type custom_ab_block_device, dev_type;
+type xbl_block_device, dev_type;
+type gpt_block_device, dev_type;
+type modem_block_device, dev_type;
+type uefi_block_device, dev_type;
+type persist_block_device, dev_type;
+type npu_device, dev_type;
+type devinfo_block_device, dev_type;
+type latency_device, dev_type;
diff --git a/vendor/qcom/common/diag.te b/vendor/qcom/common/diag.te
new file mode 100644
index 0000000..a130f63
--- /dev/null
+++ b/vendor/qcom/common/diag.te
@@ -0,0 +1,3 @@
+type diag, domain;
+type diag_exec, exec_type, vendor_file_type, file_type;
+ init_daemon_domain(diag) \ No newline at end of file
diff --git a/vendor/qcom/common/dtsconfigurator.te b/vendor/qcom/common/dtsconfigurator.te
new file mode 100644
index 0000000..1165bdb
--- /dev/null
+++ b/vendor/qcom/common/dtsconfigurator.te
@@ -0,0 +1,3 @@
+type dtsconfigurator, domain;
+type dtsconfigurator_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(dtsconfigurator) \ No newline at end of file
diff --git a/vendor/qcom/common/dtseagleservice.te b/vendor/qcom/common/dtseagleservice.te
new file mode 100644
index 0000000..f948636
--- /dev/null
+++ b/vendor/qcom/common/dtseagleservice.te
@@ -0,0 +1,3 @@
+type dtseagleservice, domain;
+type dtseagleservice_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(dtseagleservice) \ No newline at end of file
diff --git a/vendor/qcom/common/energyawareness.te b/vendor/qcom/common/energyawareness.te
new file mode 100644
index 0000000..f2a21cc
--- /dev/null
+++ b/vendor/qcom/common/energyawareness.te
@@ -0,0 +1,3 @@
+type energyawareness, domain;
+type energyawareness_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(energyawareness) \ No newline at end of file
diff --git a/vendor/qcom/common/esepmdaemon.te b/vendor/qcom/common/esepmdaemon.te
new file mode 100644
index 0000000..311c97f
--- /dev/null
+++ b/vendor/qcom/common/esepmdaemon.te
@@ -0,0 +1,3 @@
+type esepmdaemon, domain;
+type esepmdaemon_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(esepmdaemon) \ No newline at end of file
diff --git a/vendor/qcom/common/factory_ota_app.te b/vendor/qcom/common/factory_ota_app.te
new file mode 100644
index 0000000..737230c
--- /dev/null
+++ b/vendor/qcom/common/factory_ota_app.te
@@ -0,0 +1 @@
+type factory_ota_app, domain, coredomain;
diff --git a/vendor/qcom/common/fidodaemon.te b/vendor/qcom/common/fidodaemon.te
new file mode 100644
index 0000000..8bc6cf3
--- /dev/null
+++ b/vendor/qcom/common/fidodaemon.te
@@ -0,0 +1,3 @@
+type fidodaemon, domain;
+type fidodaemon_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(fidodaemon) \ No newline at end of file
diff --git a/vendor/qcom/common/file.te b/vendor/qcom/common/file.te
index aa2bbb0..1da33d1 100644
--- a/vendor/qcom/common/file.te
+++ b/vendor/qcom/common/file.te
@@ -1,3 +1,191 @@
-# used for /dsp files
+type firmware_file, file_type, contextmount_type, vendor_file_type;
+type vendor_firmware_file, vendor_file_type, file_type;
+type qmuxd_socket, file_type;
+type netmgrd_socket, file_type;
+type vendor_qti_data_file, file_type, data_file_type;
+type proc_wifi_dbg, proc_type, fs_type;
+type proc_swappiness, proc_type, fs_type;
+type pps_socket, file_type;
+type qdcmsocket_socket, file_type;
+type cnd_socket, file_type, mlstrustedobject;
+type cnd_data_file, file_type, data_file_type;
+type chre_socket, file_type;
+type sysfs_hsic_modem_wait, sysfs_type, fs_type;
+type sysfs_smd_open_timeout, sysfs_type, fs_type;
+type sysfs_soc, sysfs_type, fs_type;
+type sysfs_msm_subsys, sysfs_type, fs_type;
+type sysfs_spss, sysfs_type, fs_type;
+type sysfs_faceauth, sysfs_type, fs_type;
+type netmgrd_data_file, file_type, data_file_type;
+type sysrq_trigger_proc, fs_type, mlstrustedobject;
+type persist_file, file_type, vendor_persist_type;
+type persist_bluetooth_file, file_type , vendor_persist_type;
+type persist_camera_file, file_type , vendor_persist_type;
+type persist_data_file, file_type , vendor_persist_type;
+type persist_drm_file, file_type , vendor_persist_type;
+type data_qtee_file, file_type, data_file_type;
+type vendor_persist_mmi_file, file_type, vendor_persist_type;
+type persist_misc_file, file_type , vendor_persist_type;
+type persist_bms_file, file_type , vendor_persist_type;
+type persist_secnvm_file, file_type , vendor_persist_type;
+type persist_hvdcp_file, file_type , vendor_persist_type;
+type persist_audio_file, file_type , vendor_persist_type;
+type proc_audiod, fs_type, proc_type;
+type proc_sysctl_schedboost, proc_type, fs_type;
+type proc_irq, fs_type, proc_type;
+type sysfs_irq, fs_type, sysfs_type;
+type irqbalance_socket, file_type;
+type sensors_socket, file_type;
+type sensors_persist_file, file_type, vendor_persist_type;
+type sysfs_sensors, sysfs_type, fs_type;
+type thermal_socket, file_type;
+type sysfs_msmuart_file, sysfs_type, fs_type;
+type rfs_system_file, system_file_type, file_type;
+type rfs_file, file_type, data_file_type;
+type rfs_shared_hlos_file, file_type, data_file_type;
+type persist_rfs_file, file_type, vendor_persist_type;
+type persist_rfs_shared_hlos_file, file_type, vendor_persist_type;
+type data_ad_calib_cfg, file_type, data_file_type;
+type sysfs_graphics, sysfs_type, fs_type;
+type sysfs_usb_supply, sysfs_type, fs_type;
+type sysfs_battery_supply, sysfs_type, fs_type;
+type sysfs_usbpd_device, sysfs_type, fs_type;
+type sysfs_vadc_dev, sysfs_type, fs_type;
+type sysfs_spmi_dev, sysfs_type, fs_type;
+type sysfs_qdss_dev, sysfs_type, fs_type;
+type sysfs_poweron_alarm, sysfs_type, fs_type;
+type sysfs_mpdecision, fs_type, sysfs_type;
+type sysfs_rqstats, fs_type, sysfs_type;
+type sysfs_cpu_online, fs_type, sysfs_type;
+type mpctl_socket, file_type, mlstrustedobject;
+type mpctl_data_file, file_type, data_file_type;
+type lm_data_file, file_type, data_file_type;
+type sysfs_devfreq, fs_type, sysfs_type;
+type sysfs_devfreq_l3cdsp, fs_type, sysfs_type;
+type sysfs_mmc_host, fs_type, sysfs_type;
+type sysfs_scsi_host, fs_type, sysfs_type;
+type sysfs_cpu_boost, fs_type, sysfs_type;
+type sysfs_msm_perf, fs_type, sysfs_type;
+type sysfs_memory, fs_type, sysfs_type;
+type sysfs_lib, fs_type, sysfs_type;
+type sysfs_slpi, fs_type, sysfs_type;
+type sysfs_process_reclaim, fs_type, sysfs_type;
+type sysfs_vmpressure, fs_type, sysfs_type;
+type sysfs_msm_boot, fs_type, sysfs_type;
+type sysfs_timestamp_switch, sysfs_type, fs_type;
+type gamed_socket, file_type;
+type iop_socket, file_type;
+type iop_data_file, file_type, data_file_type;
+type ims_socket, file_type;
+type mlid_socket, file_type, mlstrustedobject;
+type ssgqmig_socket, file_type, mlstrustedobject;
+type ssgtzd_socket, file_type, mlstrustedobject;
+type location_data_file, file_type, data_file_type;
+type location_socket, file_type, data_file_type;
+type wifihal_socket, file_type;
+type sysfs_esoc, sysfs_type, fs_type;
+type sysfs_ssr, sysfs_type, fs_type;
+type sysfs_ssr_writable, sysfs_type, fs_type;
+type sysfs_ssr_toggle, sysfs_type, fs_type;
+type sysfs_hsic, sysfs_type, fs_type;
+type sysfs_hsic_host_rdy, sysfs_type, fs_type;
+type sysfs_socinfo, fs_type, sysfs_type;
+type sysfs_usb_uicc, sysfs_type, fs_type;
+type qlogd_socket, file_type, mlstrustedobject;
+type display_vendor_data_file, file_type, data_file_type;
+type persist_display_file, file_type, vendor_persist_type;
+type ipacm_socket, file_type;
+type ipa_vendor_data_file, file_type, data_file_type;
+type camera_vendor_data_file, file_type, data_file_type;
+type vendor_audio_data_file, file_type, data_file_type;
+type vendor_tombstone_data_file, file_type, data_file_type;
+type port_bridge_data_file, file_type, data_file_type;
+type bt_firmware_file, file_type, contextmount_type, vendor_file_type;
+type proc_dirty_ratio, fs_type, proc_type;
+type vendor_mmi_socket, file_type;
+type hbtp_cfg_file, file_type, vendor_file_type;
+type hbtp_log_file, file_type, data_file_type;
+type hbtp_kernel_sysfs, fs_type, sysfs_type;
+type persist_usf_file, file_type, vendor_persist_type;
+type sysfs_rmtfs, sysfs_type, fs_type;
+type qfp-daemon_data_file, file_type, data_file_type;
+type persist_qti_fp_file, file_type, vendor_persist_type;
+type qsee_svc_app_data_file, file_type, data_file_type;
+type imshelper_app_data_file, file_type, data_file_type;
+type RIDL_data_file, file_type, data_file_type;
+type RIDL_socket, file_type, data_file_type;
+type qti_logkit_priv_data_file, file_type, data_file_type;
+type qti_logkit_pub_data_file, file_type, data_file_type;
+type qti_logkit_priv_socket, file_type, data_file_type;
+type qti_logkit_pub_socket, file_type, mlstrustedobject, data_file_type;
type adsprpcd_file, file_type, mlstrustedobject, vendor_file_type;
-
+type mdtp_svc_app_data_file, file_type, data_file_type;
+type regionalization_file, file_type , vendor_persist_type;
+type vendor_carrier_file, file_type, vendor_file_type;
+type swap_data_file, file_type, data_file_type;
+type dynamic_nv_data_file, file_type, data_file_type;
+type wifi_vendor_data_file, file_type, data_file_type;
+type wifi_vendor_wpa_socket, file_type, data_file_type;
+type wifi_vendor_hostapd_socket, file_type, data_file_type;
+type hostapd_socket, file_type, data_file_type;
+type vendor_mediadrm_data_file, file_type, data_file_type;
+type wififtmd_socket, file_type;
+type persist_alarm_file, file_type, vendor_persist_type;
+type persist_time_file, file_type, vendor_persist_type;
+type nfc_vendor_data_file, file_type, data_file_type;
+type sysfs_kgsl, sysfs_type, fs_type;
+type sysfs_kgsl_proc, sysfs_type, fs_type;
+type sysfs_kgsl_snapshot, sysfs_type, fs_type;
+type sysfs_securetouch, fs_type, sysfs_type;
+type sysfs_data, fs_type, sysfs_type;
+type sysfs_diag, fs_type, sysfs_type;
+type sysfs_laser, fs_type, sysfs_type;
+type vendor_qdma_data_file, file_type, data_file_type;
+type qdma_socket, file_type;
+type qti_debugfs, fs_type, debugfs_type;
+type vendor_radio_data_file, file_type, data_file_type, mlstrustedobject;
+type vendor_mbn_data_file, file_type, data_file_type;
+type sysfs_uio_file, fs_type, sysfs_type;
+type sysfs_irqbalance , sysfs_type, fs_type;
+type vendor_vpp_data_file, file_type, data_file_type;
+type persist_vpp_file, file_type, vendor_persist_type;
+type vendor_camera_data_file, file_type, data_file_type;
+type vendor_media_data_file, file_type, data_file_type;
+type sensors_vendor_data_file, file_type, data_file_type;
+type sysfs_bond0, fs_type, sysfs_type;
+type sysfs_wigig, fs_type, sysfs_type;
+type wigignpt_socket, file_type, data_file_type;
+type wigig_hostapd_socket, file_type, data_file_type;
+type sysfs_ea, fs_type, sysfs_type;
+type sysfs_audio, fs_type, sysfs_type;
+type audio_vendor_data_file, file_type, data_file_type;
+type sysfs_msm_stats, fs_type, sysfs_type;
+type sysfs_msm_power, fs_type, sysfs_type;
+type sysfs_fm, sysfs_type, fs_type;
+type sysfs_boot_adsp, sysfs_type, fs_type;
+type data_tzstorage_file, file_type, data_file_type;
+type tlocd_data_file, file_type, data_file_type;
+type data_qsee_file, file_type, data_file_type;
+type sysfs_sectouch, sysfs_type, fs_type;
+type vendor_tui_data_file, file_type, data_file_type;
+type vendor_bt_data_file, file_type, data_file_type;
+type sysfs_jpeg, fs_type, sysfs_type;
+type ramdump_vendor_data_file, file_type, data_file_type, mlstrustedobject;
+type sysfs_npu, fs_type, sysfs_type;
+type vendor_ramdump_data_file, file_type, data_file_type;
+type vendor_mdmhelperdata_data_file, file_type, data_file_type;
+type ssr_log_file, file_type, data_file_type;
+typeattribute mnt_vendor_file vendor_persist_type;
+type hal_neuralnetworks_data_file, file_type, data_file_type;
+type mpss_rfs_data_file, data_file_type, file_type;
+type rfs_tombstone_data_file, data_file_type, file_type;
+type sysfs_msm_wlan, sysfs_type, fs_type;
+type sysfs_scsi_devices_0000, sysfs_type, fs_type;
+type debugfs_sched_features, debugfs_type, fs_type;
+type debugfs_wlan, debugfs_type, fs_type;
+type debugfs_ipc, debugfs_type, fs_type;
+type debugfs_icnss, debugfs_type, fs_type;
+type debugfs_ion, debugfs_type, fs_type;
+type debugfs_tzdbg, debugfs_type, fs_type;
+type cnss_vendor_data_file, file_type, data_file_type, mlstrustedobject;
+type modem_fdr_file, file_type, data_file_type;
diff --git a/vendor/qcom/common/file_contexts b/vendor/qcom/common/file_contexts
index 221bf72..9df6e64 100644
--- a/vendor/qcom/common/file_contexts
+++ b/vendor/qcom/common/file_contexts
@@ -1,10 +1,389 @@
###################################
+# System files
+#
+/(vendor|system/vendor)/bin/ATFWD-daemon u:object_r:atfwd_exec:s0
+/(vendor|system/vendor)/bin/PktRspTest u:object_r:diag_exec:s0
+/(vendor|system/vendor)/bin/audiod u:object_r:audiod_exec:s0
+/(vendor|system/vendor)/bin/charger_monitor u:object_r:charger_monitor_exec:s0
+/(vendor|system/vendor)/bin/hvdcp_opti u:object_r:hvdcp_exec:s0
+/(vendor|system/vendor)/bin/cnd u:object_r:cnd_exec:s0
+/(vendor|system/vendor)/bin/diag_callback_client u:object_r:diag_exec:s0
+/(vendor|system/vendor)/bin/diag_dci_sample u:object_r:diag_exec:s0
+/(vendor|system/vendor)/bin/diag_klog u:object_r:diag_exec:s0
+/(vendor|system/vendor)/bin/diag_mdlog u:object_r:qlogd_exec:s0
+/(vendor|system/vendor)/bin/drmdiagapp u:object_r:diag_exec:s0
+/(vendor|system/vendor)/bin/diag_qshrink4_daemon u:object_r:diag_exec:s0
+/(vendor|system/vendor)/bin/diag_socket_log u:object_r:diag_exec:s0
+/(vendor|system/vendor)/bin/diag_uart_log u:object_r:diag_exec:s0
+/(vendor|system/vendor)/bin/diag_buffering_test u:object_r:diag_exec:s0
+/(vendor|system/vendor)/bin/irsc_util u:object_r:irsc_util_exec:s0
+/(vendor|system/vendor)/bin/qrtr-cfg u:object_r:qrtr_exec:s0
+/(vendor|system/vendor)/bin/qrtr-ns u:object_r:qrtr_exec:s0
+/(vendor|system/vendor)/bin/init\.qcom\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.qcom\.class_core\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.qcom\.bt\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.qcom\.early_boot\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.class_main\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.qcom\.post_boot\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.qcom\.sensors\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.qcom\.usb\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.mdm\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.mdm\.crashdata\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.qcom\.syspart_fixup\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/hcidump.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/hsic\.control\.bt\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.ath3k\.bt\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.crda\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.qcom\.coex\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.qcom\.debug-sdm660\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.qcom\.debug\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.qcom\.efs\.sync\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.qti\.fm\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.qcom\.sdio\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.qcom\.uicc\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.qcom\.wifi\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.qti\.ims\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/init\.sensors\.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/qca6234-service.sh u:object_r:qti_init_shell_exec:s0
+/(vendor|system/vendor)/bin/mm-pp-daemon u:object_r:mm-pp-daemon_exec:s0
+/(vendor|system/vendor)/bin/mm-pp-dpps u:object_r:mm-pp-daemon_exec:s0
+/(vendor|system/vendor)/bin/mmi u:object_r:vendor_mmi_exec:s0
+/(vendor|system/vendor)/bin/mmid u:object_r:vendor_mmi_exec:s0
+/(vendor|system/vendor)/bin/qdcmss u:object_r:qdcm-ss_exec:s0
+/(vendor|system/vendor)/bin/msm_irqbalance u:object_r:msm_irqbalanced_exec:s0
+/(vendor|system/vendor)/bin/imsdatadaemon u:object_r:ims_exec:s0
+/(vendor|system/vendor)/bin/imsqmidaemon u:object_r:ims_exec:s0
+/(vendor|system/vendor)/bin/ims_rtp_daemon u:object_r:hal_imsrtp_exec:s0
+/(vendor|system/vendor)/bin/netmgrd u:object_r:netmgrd_exec:s0
+/(vendor|system/vendor)/bin/qmuxd u:object_r:qmuxd_exec:s0
+/(vendor|system/vendor)/bin/port-bridge u:object_r:port-bridge_exec:s0
+/(vendor|system/vendor)/bin/sensors.qcom u:object_r:sensors_exec:s0
+/(vendor|system/vendor)/bin/sensors.qti u:object_r:sensors_exec:s0
+/(vendor|system/vendor)/bin/test_diag u:object_r:diag_exec:s0
+/(vendor|system/vendor)/bin/thermal-engine u:object_r:thermal-engine_exec:s0
+/(vendor|system/vendor)/bin/vm_bms u:object_r:vm_bms_exec:s0
+/(vendor|system/vendor)/bin/wfdhdcphalservice u:object_r:wfdhdcphalservice_qti_exec:s0
+/(vendor|system/vendor)/bin/mm-qcamera-daemon u:object_r:mm-qcamerad_exec:s0
+/(vendor|system/vendor)/bin/qfp-daemon u:object_r:qfp-daemon_exec:s0
+/(vendor|system/vendor)/bin/qvop-daemon u:object_r:qvop-daemon_exec:s0
+/system/rfs.* u:object_r:rfs_system_file:s0
+/(vendor|system/vendor)/bin/time_daemon u:object_r:time_daemon_exec:s0
+/(vendor|system/vendor)/bin/rmt_storage u:object_r:rmt_storage_exec:s0
+/(vendor|system/vendor)/bin/tftp_server u:object_r:rfs_access_exec:s0
+/(vendor|system/vendor)/bin/hvdcp u:object_r:hvdcp_exec:s0
+/(vendor|system/vendor)/bin/qseecomd u:object_r:tee_exec:s0
+/(vendor|system/vendor)/bin/spdaemon u:object_r:spdaemon_exec:s0
+/(vendor|system/vendor)/bin/sec_nvm u:object_r:sec_nvm_exec:s0
+/(vendor|system/vendor)/bin/cnss-daemon u:object_r:wcnss_service_exec:s0
+/(vendor|system/vendor)/bin/cnss_diag u:object_r:wcnss_service_exec:s0
+/(vendor|system/vendor)/bin/hostapd_cli u:object_r:hostapd_exec:s0
+/(vendor|system/vendor)/bin/adsprpcd u:object_r:adsprpcd_exec:s0
+/(vendor|system/vendor)/bin/cdsprpcd u:object_r:cdsprpcd_exec:s0
+/(vendor|system/vendor)/bin/wpa_cli u:object_r:wcnss_service_exec:s0
+/(vendor|system/vendor)/bin/mdm_helper u:object_r:mdm_helper_exec:s0
+/(vendor|system/vendor)/bin/mdm_helper_proxy u:object_r:mdm_helper_exec:s0
+/(vendor|system/vendor)/bin/ks u:object_r:mdm_helper_exec:s0
+/(vendor|system/vendor)/bin/pm-service u:object_r:vendor_per_mgr_exec:s0
+/(vendor|system/vendor)/bin/pm-proxy u:object_r:vendor_per_mgr_exec:s0
+/(vendor|system/vendor)/bin/pd-mapper u:object_r:vendor_pd_mapper_exec:s0
+/(vendor|system/vendor)/bin/pd-api-test u:object_r:vendor_pd_mapper_exec:s0
+/(vendor|system/vendor)/bin/usb_uicc_client u:object_r:usb_uicc_daemon_exec:s0
+/(vendor|system/vendor)/bin/qcom-system-daemon u:object_r:vendor_qcomsysd_exec:s0
+/(vendor|system/vendor)/bin/poweroffhandler u:object_r:poweroffhandler_exec:s0
+/(vendor|system/vendor)/xbin/qlogd u:object_r:qlogd_exec:s0
+/(vendor|system/vendor)/bin/dpmQmiMgr u:object_r:hal_dpmQmiMgr_exec:s0
+/(vendor|system/vendor)/bin/ssr_setup u:object_r:vendor_ssr_setup_exec:s0
+/(vendor|system/vendor)/bin/subsystem_ramdump u:object_r:vendor_subsystem_ramdump_exec:s0
+/(vendor|system/vendor)/bin/ssr_diag u:object_r:vendor_ssr_diag_exec:s0
+/(vendor|system/vendor)/bin/hw/qcrild u:object_r:rild_exec:s0
+/vendor/bin/hw/android\.hardware\.drm@1\.2-service\.clearkey u:object_r:hal_drm_clearkey_exec:s0
+/(vendor|system/vendor)/bin/hw/android\.hardware\.drm@1\.2-service\.widevine u:object_r:hal_drm_widevine_exec:s0
+/(vendor|system/vendor)/bin/hw/android\.hardware\.gnss@.*-service-qti u:object_r:hal_gnss_qti_exec:s0
+/(vendor|system/vendor)/bin/hw/vendor\.qti\.gnss@.*-service u:object_r:hal_gnss_qti_exec:s0
+/(vendor|system/vendor)/bin/hw/android\.hardware\.bluetooth@1\.0-service-qti u:object_r:hal_bluetooth_default_exec:s0
+/(vendor|system/vendor)/bin/hw/vendor\.display\.color@1\.0-service u:object_r:hal_display_color_default_exec:s0
+/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.perf@1\.0-service u:object_r:hal_perf_default_exec:s0
+/(vendor|system/vendor)/bin/ssgqmigd u:object_r:ssgqmigd_exec:s0
+/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.iop@1\.0-service u:object_r:hal_iop_default_exec:s0
+/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.iop@2\.0-service u:object_r:hal_iop_default_exec:s0
+/vendor/bin/hw/vendor\.qti\.hardware\.mlshal@1\.0-service u:object_r:hal_mirrorlink_qti_exec:s0
+/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.perf@2\.0-service u:object_r:hal_perf_default_exec:s0
+/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.qdutils_disp@1\.0-service-qti u:object_r:hal_qdutils_disp_qti_exec:s0
+/(vendor|system/vendor)/bin/sscrpcd u:object_r:sensors_exec:s0
+/(vendor|system/vendor)/bin/mlid u:object_r:mlid_exec:s0
+/(vendor|system/vendor)/bin/loc_launcher u:object_r:location_exec:s0
+/(vendor|system/vendor)/bin/lowi-server u:object_r:location_exec:s0
+/(vendor|system/vendor)/bin/xtra-daemon u:object_r:location_exec:s0
+/(vendor|system/vendor)/bin/energy-awareness u:object_r:energyawareness_exec:s0
+/(vendor|system/vendor)/bin/fidodaemon u:object_r:fidodaemon_exec:s0
+/(vendor|system/vendor)/bin/esepmdaemon u:object_r:esepmdaemon_exec:s0
+/(vendor|system/vendor)/bin/secotad u:object_r:secotad_exec:s0
+/(vendor|system/vendor)/bin/qseeproxydaemon u:object_r:qseeproxy_exec:s0
+/(vendor|system/vendor)/bin/dts_configurator u:object_r:dtsconfigurator_exec:s0
+/(vendor|system/vendor)/bin/dts_eagle_service u:object_r:dtseagleservice_exec:s0
+/(vendor|system/vendor)/bin/qti u:object_r:qti_exec:s0
+/(vendor|system/vendor)/bin/adpl u:object_r:adpl_exec:s0
+/(vendor|system/vendor)/bin/wcnss_service u:object_r:wcnss_service_exec:s0
+/(vendor|system/vendor)/bin/hbtp_daemon u:object_r:hbtp_exec:s0
+/(vendor|system/vendor)/bin/touch_fusion u:object_r:touchfusion_exec:s0
+/(vendor|system/vendor)/bin/seemp_healthd u:object_r:seemp_health_daemon_exec:s0
+/(vendor|system/vendor)/bin/wifidisplayhalservice u:object_r:wifidisplayhalservice_qti_exec:s0
+/(vendor|system/vendor)/bin/usf_epos u:object_r:usf_exec:s0
+/(vendor|system/vendor)/bin/usf_gesture u:object_r:usf_exec:s0
+/(vendor|system/vendor)/bin/usf_hovering u:object_r:usf_exec:s0
+/(vendor|system/vendor)/bin/usf_p2p u:object_r:usf_exec:s0
+/(vendor|system/vendor)/bin/usf_proximity u:object_r:usf_exec:s0
+/(vendor|system/vendor)/bin/usf_sync_gesture u:object_r:usf_exec:s0
+/(vendor|system/vendor)/bin/usf_sw_calib u:object_r:usf_exec:s0
+/(vendor|system/vendor)/bin/usf_pairing u:object_r:usf_exec:s0
+/(vendor|system/vendor)/bin/usf_tester u:object_r:usf_exec:s0
+/(vendor|system/vendor)/bin/LKCore u:object_r:qti_logkit_exec:s0
+/(vendor|system/vendor)/bin/tbaseLoader u:object_r:tbaseLoader_exec:s0
+/(vendor|system/vendor)/bin/mcStarter u:object_r:mcStarter_exec:s0
+/(vendor|system/vendor)/bin/fstman u:object_r:fstman_exec:s0
+/(vendor|system/vendor)/bin/wigighalsvc u:object_r:wigighalsvc_exec:s0
+/(vendor|system/vendor)/bin/wigignpt u:object_r:wigignpt_exec:s0
+/(vendor|system/vendor)/bin/mdtpd u:object_r:mdtpdaemon_exec:s0
+/(vendor|system/vendor)/bin/wifi_ftmd u:object_r:wifi_ftmd_exec:s0
+/(vendor|system/vendor)/bin/fingerprint.qcom u:object_r:fps_hal_exec:s0
+/(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@3\.0-service-qti u:object_r:hal_keymaster_qti_exec:s0
+/(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@4\.0-service-qti u:object_r:hal_keymaster_qti_exec:s0
+/(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@4\.0-strongbox-service-qti u:object_r:hal_keymaster_qti_exec:s0
+/(vendor|system/vendor)/bin/hw/android\.hardware\.gatekeeper@1\.0-service-qti u:object_r:hal_gatekeeper_qti_exec:s0
+/(vendor|system/vendor)/bin/hw/android\.hardware\.nfc@1\.2-service\.st u:object_r:hal_nfc_default_exec:s0
+/(vendor|system/vendor)/bin/hw/android\.hardware\.confirmationui@1\.0-service-google u:object_r:hal_confirmationui_default_exec:s0
+/(vendor|system/vendor)/bin/qdmastatsd u:object_r:qdmastatsd_exec:s0
+/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.alarm@1\.0-service u:object_r:hal_alarm_qti_default_exec:s0
+/(vendor|system/vendor)/bin/imsrcsd u:object_r:hal_rcsservice_exec:s0
+/(vendor|system/vendor)/bin/vppservice u:object_r:vendor_vppservice_exec:s0
+/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.qteeconnector@1\.0-service u:object_r:hal_qteeconnector_qti_exec:s0
+/(vendor|system/vendor)/bin/fm_qsoc_patches u:object_r:fm_qsoc_patches_exec:s0
+/(vendor|system/vendor)/bin/chre u:object_r:chre_exec:s0
+/(vendor|system/vendor)/bin/tloc_daemon u:object_r:tlocd_exec:s0
+/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.factory@1\.0-service u:object_r:vendor_hal_factory_qti_default_exec:s0
+/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.display\.allocator@1\.0-service u:object_r:hal_graphics_allocator_default_exec:s0
+/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.display\.allocator-service u:object_r:hal_graphics_allocator_default_exec:s0
+/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.tui_comm@1\.0-service-qti u:object_r:hal_tui_comm_qti_exec:s0
+/(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.sensorscalibrate@1\.0-service u:object_r:hal_sensorscalibrate_qti_default_exec:s0
+/(vendor|system/vendor)/bin/hw/vendor\.qti\.media\.c2@1\.0-service u:object_r:mediacodec_exec:s0
+/(vendor|system/vendor)/bin/power_off_alarm u:object_r:power_off_alarm_exec:s0
+
+# dev socket nodes
+/dev/socket/chre u:object_r:chre_socket:s0
+/dev/socket/msm_irqbalance u:object_r:irqbalance_socket:s0
+/dev/socket/qmux_radio(/.*)? u:object_r:qmuxd_socket:s0
+/dev/socket/netmgr(/.*)? u:object_r:netmgrd_socket:s0
+/dev/socket/ims_qmid u:object_r:ims_socket:s0
+/dev/socket/ims_datad u:object_r:ims_socket:s0
+/dev/socket/cnd u:object_r:cnd_socket:s0
+
+
+###################################
+# persist files
+#
+/persist u:object_r:persist_file:s0
+/mnt/vendor/persist(/.*)? u:object_r:persist_file:s0
+/mnt/vendor/persist/camera(/.*)? u:object_r:persist_camera_file:s0
+/mnt/vendor/persist/bluetooth(/.*)? u:object_r:persist_bluetooth_file:s0
+/mnt/vendor/persist/drm(/.*)? u:object_r:persist_drm_file:s0
+/mnt/vendor/persist/sensors(/.*)? u:object_r:sensors_persist_file:s0
+/mnt/vendor/persist/alarm(/.*)? u:object_r:persist_alarm_file:s0
+/mnt/vendor/persist/time(/.*)? u:object_r:persist_time_file:s0
+/mnt/vendor/persist/data(/.*)? u:object_r:persist_drm_file:s0
+/mnt/vendor/persist/data/tz(/.*)? u:object_r:persist_drm_file:s0
+/mnt/vendor/persist/data/sfs(/.*)? u:object_r:persist_drm_file:s0
+/mnt/vendor/persist/qti_fp(/.*)? u:object_r:persist_qti_fp_file:s0
+/mnt/vendor/persist/usf(/.*)? u:object_r:persist_usf_file:s0
+/mnt/vendor/persist/hlos_rfs(/.*)? u:object_r:persist_rfs_shared_hlos_file:s0
+/mnt/vendor/persist/display(/.*)? u:object_r:persist_display_file:s0
+/mnt/vendor/persist/rfs.* u:object_r:persist_rfs_file:s0
+/mnt/vendor/persist/speccfg(/.*)? u:object_r:regionalization_file:s0
+/mnt/vendor/persist/misc(/.*)? u:object_r:persist_misc_file:s0
+/mnt/vendor/persist/bms(/.*)? u:object_r:persist_bms_file:s0
+/mnt/vendor/persist/vpp(/.*)? u:object_r:persist_vpp_file:s0
+/mnt/vendor/persist/secnvm(/.*)? u:object_r:persist_secnvm_file:s0
+/mnt/vendor/persist/FTM_AP(/.*)? u:object_r:vendor_persist_mmi_file:s0
+/mnt/vendor/persist/hvdcp_opti(/.*)? u:object_r:persist_hvdcp_file:s0
+/mnt/vendor/persist/audio(/.*)? u:object_r:persist_audio_file:s0
+
+###################################
+# etc files
+#
+/vendor/etc/hbtp/* u:object_r:hbtp_cfg_file:s0
+
+###################################
# adsp files
#
+/(vendor|system/vendor)/dsp(/.*)? u:object_r:adsprpcd_file:s0
/dsp(/.*)? u:object_r:adsprpcd_file:s0
###################################
-# persist files
+# cache files
+#
+
+###################################
+# vendor files
+#
+/vendor/package(/.*)? u:object_r:vendor_carrier_file:s0
+/vendor/package(/.*)?/overlay(/.*)? u:object_r:vendor_overlay_file:s0
+/vendor/package(/.*)?/app(/.*)? u:object_r:vendor_app_file:s0
+
+# same-process HAL files and their dependencies
#
-/persist u:object_r:persist_default_file:s0
+/vendor/lib(64)?/hw/android\.hardware\.graphics\.mapper@2\.0-impl-qti-display\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/vendor\.qti\.hardware\.display\.mapper@1\.0\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/vendor\.qti\.hardware\.display\.mapper@2\.0\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/vendor\.qti\.hardware\.display\.mapperextensions@1\.0\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/hw/android\.hardware\.graphics\.mapper@3\.0-impl-qti-display\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/vendor\.qti\.hardware\.display\.mapper@3\.0\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libqdMetaData\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/lib_aion_buffer\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libqservice\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libqdutils\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libadreno_utils\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libgsl\.so u:object_r:same_process_hal_file:s0
+
+/vendor/lib(64)?/libEGL_adreno\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libGLESv1_CM_adreno\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libGLESv2_adreno\.so u:object_r:same_process_hal_file:s0
+
+/vendor/lib(64)?/libdrmutils\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libdrm\.so u:object_r:same_process_hal_file:s0
+
+/vendor/lib(64)?/libavenhancements\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libgrallocutils\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libgralloccore\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libExtendedExtractor.so u:object_r:same_process_hal_file:s0
+# RenderScript dependencies.
+# To test: run cts -m CtsRenderscriptTestCases
+/vendor/lib(64)?/libRSDriver_adreno\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libCB\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libllvm-qgl\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libbccQTI\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libllvm-qcom\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/librs_adreno\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/librs_adreno_sha1\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libqti-perfd-client\.so u:object_r:same_process_hal_file:s0
+# perf-hal client lib (included by libqti-perfd-client.so)
+/vendor/lib(64)?/vendor\.qti\.hardware\.perf@1\.0\.so u:object_r:same_process_hal_file:s0
+
+# libGLESv2_adreno depends on this
+/vendor/lib(64)?/libllvm-glnext\.so u:object_r:same_process_hal_file:s0
+
+# libOpenCL-pixel and its dependencies
+/vendor/lib(64)?/libOpenCL-pixel\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libOpenCL\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libq3dtools_adreno\.so u:object_r:same_process_hal_file:s0
+
+# hbtp dependencies
+/vendor/lib(64)?/libhbtpitsjni\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libhbtpdbgclientjni\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libhbtpjni\.so u:object_r:same_process_hal_file:s0
+
+#Loaded by native loader (zygote) for all processes
+/vendor/lib(64)?/libhalide_hexagon_host\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libadsprpc\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libcdsprpc\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libsdsprpc\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libdiag\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libtime_genoff\.so u:object_r:same_process_hal_file:s0
+
+# libmmi_jni
+/vendor/lib(64)?/libmmi_jni\.so u:object_r:same_process_hal_file:s0
+
+# Fastcv libs
+/vendor/lib(64)?/libfastcvdsp_stub\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libfastcvadsp_stub\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/libfastcvopt\.so u:object_r:same_process_hal_file:s0
+
+# SVA files
+/vendor/lib(64)?/liblistenjni\.so u:object_r:same_process_hal_file:s0
+/vendor/lib(64)?/liblistensoundmodel2\.so u:object_r:same_process_hal_file:s0
+###################################
+# firmware images
+#
+/vendor/firmware(/.*)? u:object_r:vendor_firmware_file:s0
+/vendor/bt_firmware(/.*)? u:object_r:bt_firmware_file:s0
+/vendor/firmware_mnt(/.*)? u:object_r:firmware_file:s0
+
+/(vendor|system/vendor)/bin/grep u:object_r:vendor_toolbox_exec:s0
+##################################
+#vendor toolbox
+#
+/(vendor|system/vendor)/bin/toolbox_vendor u:object_r:vendor_toolbox_exec:s0
+
+/dev/st21nfc u:object_r:nfc_device:s0
+/data/nfc(/.*)? u:object_r:nfc_data_file:s0
+#Android NN Driver
+/(vendor|system/vendor)/bin/hw/android\.hardware\.neuralnetworks@1\.2-service-qti u:object_r:hal_neuralnetworks_default_exec:s0
+
+# dev nodes
+/dev/ipa u:object_r:ipa_dev:s0
+/dev/wwan_ioctl u:object_r:ipa_dev:s0
+/dev/ipaNatTable u:object_r:ipa_dev:s0
+/dev/sg[0-9]+ u:object_r:sg_device:s0
+/dev/qseecom u:object_r:tee_device:s0
+/dev/video([0-9])+ u:object_r:video_device:s0
+/dev/media([0-9])+ u:object_r:video_device:s0
+/dev/v4l-subdev.* u:object_r:video_device:s0
+/dev/jpeg[0-9]* u:object_r:video_device:s0
+/dev/dri/card0 u:object_r:graphics_device:s0
+/dev/adsprpc-smd u:object_r:qdsp_device:s0
+/dev/adsprpc-smd-secure u:object_r:qdsp_device:s0
+/dev/kgsl-3d0 u:object_r:gpu_device:s0
+/dev/wlan u:object_r:wlan_device:s0
+/dev/cpu_dma_latency u:object_r:latency_device:s0
+/dev/smem_log u:object_r:smem_log_device:s0
+/dev/subsys_modem u:object_r:modem_ssr_device:s0
+/dev/diag u:object_r:diag_device:s0
+/dev/sp_kernel u:object_r:skp_device:s0
+/dev/qsee_ipc_irq_spss u:object_r:qsee_ipc_irq_spss_device:s0
+/dev/spcom u:object_r:spcom_device:s0
+/dev/sp_ssr u:object_r:sp_ssr_device:s0
+/dev/sp_keymaster u:object_r:sp_keymaster_device:s0
+/dev/btpower u:object_r:hci_attach_dev:s0
+/dev/ttyHS0 u:object_r:hci_attach_dev:s0
+/dev/ttyMSM0 u:object_r:tty_device:s0
+/dev/block/sda u:object_r:gpt_block_device:s0
+/dev/block/sd[bc]1? u:object_r:xbl_block_device:s0
+/dev/block/sde u:object_r:boot_block_device:s0
+/dev/msm_.* u:object_r:audio_device:s0
+/dev/ramdump_.* u:object_r:ramdump_device:s0
+/dev/at_.* u:object_r:at_device:s0
+
+# dev socket nodes
+/dev/socket/ipacm_log_file u:object_r:ipacm_socket:s0
+/dev/socket/location(/.*)? u:object_r:location_socket:s0
+/dev/socket/wifihal(/.*)? u:object_r:wifihal_socket:s0
+/dev/socket/pps u:object_r:pps_socket:s0
+
+# files in /vendor
+/vendor/bin/ipacm u:object_r:hal_tetheroffload_default_exec:s0
+/vendor/bin/ipacm-diag u:object_r:hal_tetheroffload_default_exec:s0
+
+# data files
+/data/vendor/ipa(/.*)? u:object_r:ipa_vendor_data_file:s0
+/data/vendor/sensors(/.*)? u:object_r:sensors_vendor_data_file:s0
+/data/vendor/rfs/mpss(/.*)? u:object_r:mpss_rfs_data_file:s0
+/data/vendor/radio(/.*)? u:object_r:vendor_radio_data_file:s0
+/data/vendor/netmgr(/.*)? u:object_r:netmgrd_data_file:s0
+/data/vendor/modem_fdr(/.*)? u:object_r:modem_fdr_file:s0
+/data/vendor/mediadrm(/.*)? u:object_r:mediadrm_vendor_data_file:s0
+/data/vendor/ramdump(/.*)? u:object_r:ramdump_vendor_data_file:s0
+/data/vendor/ssrdump(/.*)? u:object_r:ramdump_vendor_data_file:s0
+/data/vendor/ssrlog(/.*)? u:object_r:ssr_log_file:s0
+/data/vendor/camera(/.*)? u:object_r:camera_vendor_data_file:s0
+/data/vendor/location(/.*)? u:object_r:location_data_file:s0
+/data/vendor/tombstones/rfs(/.*)? u:object_r:rfs_tombstone_data_file:s0
+/data/vendor/audio(/.*)? u:object_r:audio_vendor_data_file:s0
+/data/vendor/display(/.*)? u:object_r:display_vendor_data_file:s0
+/data/vendor/time(/.*)? u:object_r:time_data_file:s0
+
+# spdaemon and sec_nvm files
+/dev/spdaemon_ssr u:object_r:spdaemon_ssr_device:s0
+/dev/sec_nvm_.* u:object_r:sec_nvm_device:s0
+
+# cnss_diag files
+/data/vendor/wifi/cnss_diag(/.*)? u:object_r:cnss_vendor_data_file:s0
+/data/vendor/connectivity(/.*)? u:object_r:cnd_data_file:s0
diff --git a/vendor/qcom/common/fm.te b/vendor/qcom/common/fm.te
new file mode 100644
index 0000000..17747e6
--- /dev/null
+++ b/vendor/qcom/common/fm.te
@@ -0,0 +1,2 @@
+type fm_qsoc_patches, domain;
+type fm_qsoc_patches_exec, exec_type, vendor_file_type, file_type;
diff --git a/vendor/qcom/common/fps_hal.te b/vendor/qcom/common/fps_hal.te
new file mode 100644
index 0000000..d42fd9d
--- /dev/null
+++ b/vendor/qcom/common/fps_hal.te
@@ -0,0 +1,3 @@
+type fps_hal, domain;
+type fps_hal_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(fps_hal) \ No newline at end of file
diff --git a/vendor/qcom/common/fstman.te b/vendor/qcom/common/fstman.te
new file mode 100644
index 0000000..a32f7ba
--- /dev/null
+++ b/vendor/qcom/common/fstman.te
@@ -0,0 +1,3 @@
+type fstman, domain;
+type fstman_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(fstman) \ No newline at end of file
diff --git a/vendor/qcom/common/gamed.te b/vendor/qcom/common/gamed.te
new file mode 100644
index 0000000..6feff29
--- /dev/null
+++ b/vendor/qcom/common/gamed.te
@@ -0,0 +1,3 @@
+type gamed, domain;
+type gamed_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(gamed) \ No newline at end of file
diff --git a/vendor/qcom/common/genfs_contexts b/vendor/qcom/common/genfs_contexts
new file mode 100644
index 0000000..667062e
--- /dev/null
+++ b/vendor/qcom/common/genfs_contexts
@@ -0,0 +1,29 @@
+genfscon sysfs /kernel/wlan u:object_r:sysfs_msm_wlan:s0
+genfscon sysfs /kernel/boot_adsp/boot u:object_r:sysfs_msm_boot:s0
+genfscon sysfs /kernel/boot_cdsp/boot u:object_r:sysfs_msm_boot:s0
+genfscon sysfs /kernel/boot_slpi/boot u:object_r:sysfs_msm_boot:s0
+genfscon sysfs /class/uio u:object_r:sysfs_uio:s0
+genfscon sysfs /devices/virtual/kgsl/kgsl/proc u:object_r:sysfs_kgsl_proc:s0
+genfscon sysfs /devices/platform/soc/0.qcom,rmtfs_sharedmem u:object_r:sysfs_rmtfs:s0
+genfscon sysfs /devices/platform/soc/soc:qcom,kgsl-hyp u:object_r:sysfs_msm_subsys:s0
+genfscon sysfs /devices/platform/soc/soc:qcom,spss_utils u:object_r:sysfs_spss:s0
+genfscon sysfs /devices/platform/soc/soc:qcom,faceauth_fws u:object_r:sysfs_faceauth:s0
+genfscon sysfs /devices/platform/soc/soc:qcom,faceauth_fws_b u:object_r:sysfs_faceauth:s0
+genfscon sysfs /bus/esoc u:object_r:sysfs_esoc:s0
+genfscon sysfs /bus/msm_subsys u:object_r:sysfs_msm_subsys:s0
+genfscon debugfs /wlan u:object_r:debugfs_wlan:s0
+genfscon debugfs /wlan0 u:object_r:debugfs_wlan:s0
+genfscon debugfs /icnss u:object_r:debugfs_icnss:s0
+genfscon debugfs /ipc_logging u:object_r:debugfs_ipc:s0
+genfscon debugfs /ion u:object_r:debugfs_ion:s0
+genfscon debugfs /tzdbg u:object_r:debugfs_tzdbg:s0
+genfscon sysfs /module/diagchar u:object_r:sysfs_diag:s0
+genfscon proc /debugdriver/driverdump u:object_r:proc_wifi_dbg:s0
+genfscon proc /ath_pktlog/cld u:object_r:proc_wifi_dbg:s0
+genfscon sysfs /devices/platform/soc/a88000.i2c/i2c-0/0-000c/a88000.i2c:qcom,smb1355@c:qcom,smb1355-charger@1000/power_supply u:object_r:sysfs_batteryinfo:s0
+genfscon sysfs /devices/platform/soc/ae00000.qcom,mdss_rotator u:object_r:sysfs_msm_subsys:s0
+genfscon sysfs /devices/platform/soc/18800000.qcom,icnss/net u:object_r:sysfs_net:s0
+genfscon sysfs /module/diagchar/parameters/timestamp_switch u:object_r:sysfs_timestamp_switch:s0
+genfscon sysfs /devices/platform/soc/soc:qcom,ipa_fws@1e08000 u:object_r:sysfs_data:s0
+genfscon sysfs /devices/virtual/xt_hardidletimer/timers u:object_r:sysfs_data:s0
+genfscon sysfs /devices/virtual/xt_idletimer/timers u:object_r:sysfs_data:s0
diff --git a/vendor/qcom/common/hal_alarm_qti_default.te b/vendor/qcom/common/hal_alarm_qti_default.te
new file mode 100644
index 0000000..47efc33
--- /dev/null
+++ b/vendor/qcom/common/hal_alarm_qti_default.te
@@ -0,0 +1,3 @@
+type hal_alarm_qti_default, domain;
+type hal_alarm_qti_default_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_alarm_qti_default) \ No newline at end of file
diff --git a/vendor/qcom/common/hal_bluetooth_qti.te b/vendor/qcom/common/hal_bluetooth_qti.te
new file mode 100644
index 0000000..4baf2b3
--- /dev/null
+++ b/vendor/qcom/common/hal_bluetooth_qti.te
@@ -0,0 +1,3 @@
+type hal_bluetooth_qti, domain;
+type hal_bluetooth_qti_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_bluetooth_qti) \ No newline at end of file
diff --git a/vendor/qcom/common/hal_display_color.te b/vendor/qcom/common/hal_display_color.te
new file mode 100644
index 0000000..4c4d3a0
--- /dev/null
+++ b/vendor/qcom/common/hal_display_color.te
@@ -0,0 +1,3 @@
+type hal_display_color_default, domain;
+type hal_display_color_default_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_display_color_default) \ No newline at end of file
diff --git a/vendor/qcom/common/hal_dpmQmiMgr.te b/vendor/qcom/common/hal_dpmQmiMgr.te
new file mode 100644
index 0000000..416dc6e
--- /dev/null
+++ b/vendor/qcom/common/hal_dpmQmiMgr.te
@@ -0,0 +1,3 @@
+type hal_dpmQmiMgr, domain;
+type hal_dpmQmiMgr_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_dpmQmiMgr) \ No newline at end of file
diff --git a/vendor/qcom/common/hal_drm_clearkey.te b/vendor/qcom/common/hal_drm_clearkey.te
new file mode 100644
index 0000000..8fb0785
--- /dev/null
+++ b/vendor/qcom/common/hal_drm_clearkey.te
@@ -0,0 +1,3 @@
+type hal_drm_clearkey, domain;
+type hal_drm_clearkey_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_drm_clearkey) \ No newline at end of file
diff --git a/vendor/qcom/common/hal_drm_widevine.te b/vendor/qcom/common/hal_drm_widevine.te
new file mode 100644
index 0000000..fbbe2a4
--- /dev/null
+++ b/vendor/qcom/common/hal_drm_widevine.te
@@ -0,0 +1,3 @@
+type hal_drm_widevine, domain;
+type hal_drm_widevine_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_drm_widevine) \ No newline at end of file
diff --git a/vendor/qcom/common/hal_factory_qti_default.te b/vendor/qcom/common/hal_factory_qti_default.te
new file mode 100644
index 0000000..6daa3e9
--- /dev/null
+++ b/vendor/qcom/common/hal_factory_qti_default.te
@@ -0,0 +1,3 @@
+type vendor_hal_factory_qti_default, domain;
+type vendor_hal_factory_qti_default_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(vendor_hal_factory_qti_default) \ No newline at end of file
diff --git a/vendor/qcom/common/hal_gatekeeper_qti.te b/vendor/qcom/common/hal_gatekeeper_qti.te
new file mode 100644
index 0000000..ac156a9
--- /dev/null
+++ b/vendor/qcom/common/hal_gatekeeper_qti.te
@@ -0,0 +1,3 @@
+type hal_gatekeeper_qti, domain;
+type hal_gatekeeper_qti_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_gatekeeper_qti) \ No newline at end of file
diff --git a/vendor/qcom/common/hal_gnss_qti.te b/vendor/qcom/common/hal_gnss_qti.te
new file mode 100644
index 0000000..4fb51fe
--- /dev/null
+++ b/vendor/qcom/common/hal_gnss_qti.te
@@ -0,0 +1,3 @@
+type hal_gnss_qti, domain;
+type hal_gnss_qti_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_gnss_qti) \ No newline at end of file
diff --git a/vendor/qcom/common/hal_imsrtp.te b/vendor/qcom/common/hal_imsrtp.te
new file mode 100644
index 0000000..905d868
--- /dev/null
+++ b/vendor/qcom/common/hal_imsrtp.te
@@ -0,0 +1,3 @@
+type hal_imsrtp, domain;
+type hal_imsrtp_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_imsrtp) \ No newline at end of file
diff --git a/vendor/qcom/common/hal_iop_default.te b/vendor/qcom/common/hal_iop_default.te
new file mode 100644
index 0000000..178fde1
--- /dev/null
+++ b/vendor/qcom/common/hal_iop_default.te
@@ -0,0 +1,3 @@
+type hal_iop_default, domain, mlstrustedsubject;
+type hal_iop_default_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_iop_default) \ No newline at end of file
diff --git a/vendor/qcom/common/hal_keymaster_qti.te b/vendor/qcom/common/hal_keymaster_qti.te
new file mode 100644
index 0000000..01cbe89
--- /dev/null
+++ b/vendor/qcom/common/hal_keymaster_qti.te
@@ -0,0 +1,3 @@
+type hal_keymaster_qti, domain;
+type hal_keymaster_qti_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_keymaster_qti) \ No newline at end of file
diff --git a/vendor/qcom/common/hal_mirrorlink_qti.te b/vendor/qcom/common/hal_mirrorlink_qti.te
new file mode 100644
index 0000000..9457a4c
--- /dev/null
+++ b/vendor/qcom/common/hal_mirrorlink_qti.te
@@ -0,0 +1,3 @@
+type hal_mirrorlink_qti, domain;
+type hal_mirrorlink_qti_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_mirrorlink_qti) \ No newline at end of file
diff --git a/vendor/qcom/common/hal_neuralnetworks.te b/vendor/qcom/common/hal_neuralnetworks.te
new file mode 100644
index 0000000..e34ea77
--- /dev/null
+++ b/vendor/qcom/common/hal_neuralnetworks.te
@@ -0,0 +1,3 @@
+type hal_neuralnetworks_default, domain;
+type hal_neuralnetworks_default_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_neuralnetworks_default) \ No newline at end of file
diff --git a/vendor/qcom/common/hal_perf_default.te b/vendor/qcom/common/hal_perf_default.te
new file mode 100644
index 0000000..7df70c6
--- /dev/null
+++ b/vendor/qcom/common/hal_perf_default.te
@@ -0,0 +1,3 @@
+type hal_perf_default, domain;
+type hal_perf_default_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_perf_default) \ No newline at end of file
diff --git a/vendor/qcom/common/hal_qdutils_disp_qti.te b/vendor/qcom/common/hal_qdutils_disp_qti.te
new file mode 100644
index 0000000..37b32be
--- /dev/null
+++ b/vendor/qcom/common/hal_qdutils_disp_qti.te
@@ -0,0 +1,3 @@
+type hal_qdutils_disp_qti, domain;
+type hal_qdutils_disp_qti_exec, exec_type, file_type, vendor_file_type;
+init_daemon_domain(hal_qdutils_disp_qti) \ No newline at end of file
diff --git a/vendor/qcom/common/hal_qteeconnector_qti.te b/vendor/qcom/common/hal_qteeconnector_qti.te
new file mode 100644
index 0000000..0effc97
--- /dev/null
+++ b/vendor/qcom/common/hal_qteeconnector_qti.te
@@ -0,0 +1,3 @@
+type hal_qteeconnector_qti, domain;
+type hal_qteeconnector_qti_exec, exec_type, file_type, vendor_file_type;
+init_daemon_domain(hal_qteeconnector_qti) \ No newline at end of file
diff --git a/vendor/qcom/common/hal_rcsservice.te b/vendor/qcom/common/hal_rcsservice.te
new file mode 100644
index 0000000..03a4ad6
--- /dev/null
+++ b/vendor/qcom/common/hal_rcsservice.te
@@ -0,0 +1,3 @@
+type hal_rcsservice, domain;
+type hal_rcsservice_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_rcsservice) \ No newline at end of file
diff --git a/vendor/qcom/common/hal_sensorscalibrate_qti_default.te b/vendor/qcom/common/hal_sensorscalibrate_qti_default.te
new file mode 100644
index 0000000..fc10c62
--- /dev/null
+++ b/vendor/qcom/common/hal_sensorscalibrate_qti_default.te
@@ -0,0 +1,3 @@
+type hal_sensorscalibrate_qti_default, domain;
+type hal_sensorscalibrate_qti_default_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_sensorscalibrate_qti_default) \ No newline at end of file
diff --git a/vendor/qcom/common/hal_tui_comm_qti.te b/vendor/qcom/common/hal_tui_comm_qti.te
new file mode 100644
index 0000000..e4f9319
--- /dev/null
+++ b/vendor/qcom/common/hal_tui_comm_qti.te
@@ -0,0 +1,3 @@
+type hal_tui_comm_qti, domain;
+type hal_tui_comm_qti_exec, exec_type, file_type, vendor_file_type;
+init_daemon_domain(hal_tui_comm_qti) \ No newline at end of file
diff --git a/vendor/qcom/common/hardware_info_app.te b/vendor/qcom/common/hardware_info_app.te
new file mode 100644
index 0000000..f156531
--- /dev/null
+++ b/vendor/qcom/common/hardware_info_app.te
@@ -0,0 +1 @@
+type hardware_info_app, domain;
diff --git a/vendor/qcom/common/hbtp.te b/vendor/qcom/common/hbtp.te
new file mode 100644
index 0000000..324c0de
--- /dev/null
+++ b/vendor/qcom/common/hbtp.te
@@ -0,0 +1,3 @@
+type hbtp, domain;
+type hbtp_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hbtp) \ No newline at end of file
diff --git a/vendor/qcom/common/hostapd.te b/vendor/qcom/common/hostapd.te
new file mode 100644
index 0000000..72d02b5
--- /dev/null
+++ b/vendor/qcom/common/hostapd.te
@@ -0,0 +1,2 @@
+type hostapd, domain;
+type hostapd_exec, exec_type, vendor_file_type, file_type;
diff --git a/vendor/qcom/common/hvdcp.te b/vendor/qcom/common/hvdcp.te
new file mode 100644
index 0000000..0ce33ba
--- /dev/null
+++ b/vendor/qcom/common/hvdcp.te
@@ -0,0 +1,3 @@
+type hvdcp, domain;
+type hvdcp_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hvdcp) \ No newline at end of file
diff --git a/vendor/qcom/common/hwservice.te b/vendor/qcom/common/hwservice.te
new file mode 100644
index 0000000..b8bb5be
--- /dev/null
+++ b/vendor/qcom/common/hwservice.te
@@ -0,0 +1,30 @@
+type hal_display_color_hwservice, hwservice_manager_type;
+type hal_iwlan_hwservice, hwservice_manager_type;
+type hal_display_config_hwservice, hwservice_manager_type;
+type hal_display_postproc_hwservice, hwservice_manager_type;
+type hal_hbtp_hwservice, hwservice_manager_type;
+type hal_dpmqmi_hwservice, hwservice_manager_type;
+type hal_imsrtp_hwservice, hwservice_manager_type;
+type hal_imscallinfo_hwservice, hwservice_manager_type;
+type wifidisplayhalservice_hwservice, hwservice_manager_type;
+type hal_iop_hwservice, hwservice_manager_type;
+type hal_alarm_qti_hwservice, hwservice_manager_type;
+type hal_datafactory_hwservice, hwservice_manager_type;
+type hal_cne_hwservice, hwservice_manager_type;
+type hal_latency_hwservice, hwservice_manager_type;
+type hal_imsrcsd_hwservice, hwservice_manager_type;
+type hal_ipacm_hwservice, hwservice_manager_type;
+type hal_vpp_hwservice, hwservice_manager_type;
+type hal_wigig_hwservice, hwservice_manager_type;
+type hal_qteeconnector_hwservice, hwservice_manager_type;
+type hal_voiceprint_hwservice, hwservice_manager_type;
+type vendor_hal_factory_qti_hwservice, hwservice_manager_type;
+type hal_wigig_npt_hwservice, hwservice_manager_type;
+type hal_tui_comm_hwservice, hwservice_manager_type;
+type hal_qdutils_disp_hwservice, hwservice_manager_type;
+type hal_sensorscalibrate_qti_hwservice, hwservice_manager_type;
+type vnd_atcmdfwd_hwservice, hwservice_manager_type;
+type hal_dataconnection_hwservice, hwservice_manager_type;
+type hal_bluetooth_sar_hwservice, hwservice_manager_type;
+type hal_cacert_hwservice, hwservice_manager_type;
+type hal_capabilityconfigstore_qti_hwservice, hwservice_manager_type;
diff --git a/vendor/qcom/common/hwservice_contexts b/vendor/qcom/common/hwservice_contexts
new file mode 100644
index 0000000..f291776
--- /dev/null
+++ b/vendor/qcom/common/hwservice_contexts
@@ -0,0 +1,34 @@
+com.qualcomm.qti.ant::IAntHci u:object_r:hal_bluetooth_hwservice:s0
+com.qualcomm.qti.dpm.api::IdpmQmi u:object_r:hal_dpmqmi_hwservice:s0
+com.qualcomm.qti.qcril.qcrilhook::IQtiOemHook u:object_r:hal_telephony_hwservice:s0
+vendor.qti.hardware.data.iwlan::IIWlan u:object_r:hal_iwlan_hwservice:s0
+com.qualcomm.qti.uceservice::IUceService u:object_r:hal_imsrcsd_hwservice:s0
+com.qualcomm.qti.imscmservice::IImsCmService u:object_r:hal_imsrcsd_hwservice:s0
+vendor.display.color::IDisplayColor u:object_r:hal_display_color_hwservice:s0
+vendor.display.config::IDisplayConfig u:object_r:hal_display_config_hwservice:s0
+vendor.display.postproc::IDisplayPostproc u:object_r:hal_display_postproc_hwservice:s0
+vendor.qti.hardware.display.mapper::IQtiMapper u:object_r:hal_graphics_mapper_hwservice:s0
+vendor.qti.hardware.bluetooth_sar::IBluetoothSar u:object_r:hal_bluetooth_sar_hwservice:s0
+vendor.qti.hardware.qdutils_disp::IQdutilsDisp u:object_r:hal_qdutils_disp_hwservice:s0
+vendor.qti.hardware.qteeconnector::IAppConnector u:object_r:hal_qteeconnector_hwservice:s0
+vendor.qti.hardware.qteeconnector::IGPAppConnector u:object_r:hal_qteeconnector_hwservice:s0
+vendor.qti.hardware.radio.am::IQcRilAudio u:object_r:hal_telephony_hwservice:s0
+vendor.qti.hardware.radio.lpa::IUimLpa u:object_r:hal_telephony_hwservice:s0
+vendor.qti.hardware.radio.qcrilhook::IQtiOemHook u:object_r:hal_telephony_hwservice:s0
+vendor.qti.hardware.radio.qtiradio::IQtiRadio u:object_r:hal_telephony_hwservice:s0
+vendor.qti.hardware.radio.uim_remote_server::IUimRemoteServiceServer u:object_r:hal_telephony_hwservice:s0
+vendor.qti.hardware.radio.uim_remote_client::IUimRemoteServiceClient u:object_r:hal_telephony_hwservice:s0
+vendor.qti.hardware.radio.uim::IUim u:object_r:hal_telephony_hwservice:s0
+vendor.qti.hardware.radio.ims::IImsRadio u:object_r:hal_telephony_hwservice:s0
+vendor.qti.hardware.sensorscalibrate::ISensorsCalibrate u:object_r:hal_sensorscalibrate_qti_hwservice:s0
+vendor.qti.hardware.tui_comm::ITuiComm u:object_r:hal_tui_comm_hwservice:s0
+vendor.qti.hardware.radio.atcmdfwd::IAtCmdFwd u:object_r:vnd_atcmdfwd_hwservice:s0
+vendor.qti.hardware.data.latency::ILinkLatency u:object_r:hal_latency_hwservice:s0
+vendor.qti.data.factory::IFactory u:object_r:hal_datafactory_hwservice:s0
+vendor.qti.imsrtpservice::IRTPService u:object_r:hal_imsrtp_hwservice:s0
+vendor.qti.hardware.cacert::IService u:object_r:hal_cacert_hwservice:s0
+hardware.google.media.c2::IConfigurable u:object_r:hal_codec2_hwservice:s0
+vendor.qti.hardware.data.connection::IDataConnection u:object_r:hal_dataconnection_hwservice:s0
+vendor.qti.hardware.capabilityconfigstore::ICapabilityConfigStore u:object_r:hal_capabilityconfigstore_qti_hwservice:s0
+vendor.qti.hardware.display.allocator::IQtiAllocator u:object_r:hal_graphics_allocator_hwservice:s0
+vendor.qti.ims.callinfo::IService u:object_r:hal_imscallinfo_hwservice:s0
diff --git a/vendor/qcom/common/ims.te b/vendor/qcom/common/ims.te
new file mode 100644
index 0000000..a82352f
--- /dev/null
+++ b/vendor/qcom/common/ims.te
@@ -0,0 +1,3 @@
+type ims, domain;
+type ims_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(ims)
diff --git a/vendor/qcom/common/imshelper_app.te b/vendor/qcom/common/imshelper_app.te
new file mode 100644
index 0000000..57a559d
--- /dev/null
+++ b/vendor/qcom/common/imshelper_app.te
@@ -0,0 +1 @@
+type imshelper_app, domain;
diff --git a/vendor/qcom/common/init_shell.te b/vendor/qcom/common/init_shell.te
new file mode 100644
index 0000000..9996030
--- /dev/null
+++ b/vendor/qcom/common/init_shell.te
@@ -0,0 +1,3 @@
+type qti_init_shell, domain;
+type qti_init_shell_exec, exec_type, vendor_file_type,file_type;
+init_daemon_domain(qti_init_shell) \ No newline at end of file
diff --git a/vendor/qcom/common/ioctl_defines b/vendor/qcom/common/ioctl_defines
new file mode 100644
index 0000000..1a7a207
--- /dev/null
+++ b/vendor/qcom/common/ioctl_defines
@@ -0,0 +1,57 @@
+# gpu_device ioctls defined in the kernel in include/uapi/linux/msm_kgsl.h
+define(`IOCTL_KGSL_DEVICE_GETPROPERTY', `0x00000902')
+define(`IOCTL_KGSL_DEVICE_WAITTIMESTAMP', `0x00000906')
+define(`IOCTL_KGSL_DEVICE_WAITTIMESTAMP_CTXTID', `0x00000907')
+define(`IOCTL_KGSL_RINGBUFFER_ISSUEIBCMDS', `0x00000910')
+define(`IOCTL_KGSL_CMDSTREAM_READTIMESTAMP', `0x00000911')
+define(`IOCTL_KGSL_CMDSTREAM_FREEMEMONTIMESTAMP', `0x00000912')
+define(`IOCTL_KGSL_DRAWCTXT_CREATE', `0x00000913')
+define(`IOCTL_KGSL_DRAWCTXT_DESTROY', `0x00000914')
+define(`IOCTL_KGSL_MAP_USER_MEM', `0x00000915')
+define(`IOCTL_KGSL_CMDSTREAM_READTIMESTAMP_CTXTID', `0x00000916')
+define(`IOCTL_KGSL_CMDSTREAM_FREEMEMONTIMESTAMP_CTXTID', `0x00000917')
+define(`IOCTL_KGSL_SHAREDMEM_FROM_PMEM', `0x00000920')
+define(`IOCTL_KGSL_SHAREDMEM_FREE', `0x00000921')
+define(`IOCTL_KGSL_DRAWCTXT_BIND_GMEM_SHADOW', `0x00000922')
+define(`IOCTL_KGSL_SHAREDMEM_FROM_VMALLOC', `0x00000923')
+define(`IOCTL_KGSL_SHAREDMEM_FLUSH_CACHE', `0x00000924')
+define(`IOCTL_KGSL_DRAWCTXT_SET_BIN_BASE_OFFSET', `0x00000925')
+define(`IOCTL_KGSL_CMDWINDOW_WRITE', `0x0000092e')
+define(`IOCTL_KGSL_GPUMEM_ALLOC', `0x0000092f')
+define(`IOCTL_KGSL_CFF_SYNCMEM', `0x00000930')
+define(`IOCTL_KGSL_CFF_USER_EVENT', `0x00000931')
+define(`IOCTL_KGSL_SETPROPERTY', `0x00000932')
+define(`IOCTL_KGSL_TIMESTAMP_EVENT', `0x00000933')
+define(`IOCTL_KGSL_GPUMEM_ALLOC_ID', `0x00000934')
+define(`IOCTL_KGSL_GPUMEM_FREE_ID', `0x00000935')
+define(`IOCTL_KGSL_GPUMEM_GET_INFO', `0x00000936')
+define(`IOCTL_KGSL_GPUMEM_SYNC_CACHE', `0x00000937')
+define(`IOCTL_KGSL_PERFCOUNTER_GET', `0x00000938')
+define(`IOCTL_KGSL_PERFCOUNTER_PUT', `0x00000939')
+define(`IOCTL_KGSL_PERFCOUNTER_QUERY', `0x0000093a')
+define(`IOCTL_KGSL_PERFCOUNTER_READ', `0x0000093b')
+define(`IOCTL_KGSL_GPUMEM_SYNC_CACHE_BULK', `0x0000093c')
+define(`IOCTL_KGSL_SUBMIT_COMMANDS', `0x0000093d')
+define(`IOCTL_KGSL_SYNCSOURCE_CREATE', `0x00000940')
+define(`IOCTL_KGSL_SYNCSOURCE_DESTROY', `0x00000941')
+define(`IOCTL_KGSL_SYNCSOURCE_CREATE_FENCE', `0x00000942')
+define(`IOCTL_KGSL_SYNCSOURCE_SIGNAL_FENCE', `0x00000943')
+define(`IOCTL_KGSL_CFF_SYNC_GPUOBJ', `0x00000944')
+define(`IOCTL_KGSL_GPUOBJ_ALLOC', `0x00000945')
+define(`IOCTL_KGSL_GPUOBJ_FREE', `0x00000946')
+define(`IOCTL_KGSL_GPUOBJ_INFO', `0x00000947')
+define(`IOCTL_KGSL_GPUOBJ_IMPORT', `0x00000948')
+define(`IOCTL_KGSL_GPUOBJ_SYNC', `0x00000949')
+define(`IOCTL_KGSL_GPU_COMMAND', `0x0000094a')
+define(`IOCTL_KGSL_PREEMPTIONCOUNTER_QUERY', `0x0000094b')
+define(`IOCTL_KGSL_GPUOBJ_SET_INFO', `0x0000094c')
+
+# socket ioctls defined in the kernel in include/uapi/linux/msm_ipc.h
+define(`IPC_ROUTER_IOCTL_GET_VERSION', `0x0000c300')
+define(`IPC_ROUTER_IOCTL_GET_MTU', `0x0000c301')
+define(`IPC_ROUTER_IOCTL_LOOKUP_SERVER', `0x0000c302')
+define(`IPC_ROUTER_IOCTL_GET_CURR_PKT_SIZE', `0x0000c303')
+define(`IPC_ROUTER_IOCTL_BIND_CONTROL_PORT', `0x0000c304')
+define(`IPC_ROUTER_IOCTL_CONFIG_SEC_RULES', `0x0000c305')
+
+define(`RMNET_IOCTL_EXTENDED', `0x000089FD')
diff --git a/vendor/qcom/common/ioctl_macros b/vendor/qcom/common/ioctl_macros
new file mode 100644
index 0000000..c2dee28
--- /dev/null
+++ b/vendor/qcom/common/ioctl_macros
@@ -0,0 +1,56 @@
+define(`gpu_ioctls', `{
+IOCTL_KGSL_DEVICE_GETPROPERTY
+IOCTL_KGSL_DEVICE_WAITTIMESTAMP_CTXTID
+IOCTL_KGSL_DRAWCTXT_CREATE
+IOCTL_KGSL_DRAWCTXT_DESTROY
+IOCTL_KGSL_MAP_USER_MEM
+IOCTL_KGSL_SHAREDMEM_FREE
+IOCTL_KGSL_SETPROPERTY
+IOCTL_KGSL_TIMESTAMP_EVENT
+IOCTL_KGSL_PERFCOUNTER_GET
+IOCTL_KGSL_PERFCOUNTER_PUT
+IOCTL_KGSL_SYNCSOURCE_CREATE
+IOCTL_KGSL_SYNCSOURCE_DESTROY
+IOCTL_KGSL_SYNCSOURCE_CREATE_FENCE
+IOCTL_KGSL_SYNCSOURCE_SIGNAL_FENCE
+IOCTL_KGSL_GPUOBJ_ALLOC
+IOCTL_KGSL_GPUOBJ_FREE
+IOCTL_KGSL_GPUOBJ_INFO
+IOCTL_KGSL_GPUOBJ_IMPORT
+IOCTL_KGSL_GPUOBJ_SYNC
+IOCTL_KGSL_GPU_COMMAND
+}')
+
+define(`msm_sock_ipc_ioctls', `{
+IPC_ROUTER_IOCTL_GET_VERSION
+IPC_ROUTER_IOCTL_GET_MTU
+IPC_ROUTER_IOCTL_LOOKUP_SERVER
+IPC_ROUTER_IOCTL_GET_CURR_PKT_SIZE
+IPC_ROUTER_IOCTL_BIND_CONTROL_PORT
+IPC_ROUTER_IOCTL_CONFIG_SEC_RULES
+}')
+
+define(`msm_sock_qrtr_ioctls', `{
+TIOCOUTQ
+}')
+
+define(`rmnet_sock_ioctls', `{
+SIOCDEVPRIVATE_1
+SIOCDEVPRIVATE_2
+SIOCDEVPRIVATE_3
+SIOCDEVPRIVATE_4
+SIOCDEVPRIVATE_5
+SIOCDEVPRIVATE_6
+SIOCDEVPRIVATE_7
+SIOCDEVPRIVATE_8
+SIOCDEVPRIVATE_9
+SIOCDEVPRIVATE_A
+SIOCDEVPRIVATE_B
+SIOCDEVPRIVATE_C
+SIOCDEVPRIVATE_D
+}')
+
+define(`wlan_sock_ioctls', `{
+SIOCSIWPRIV
+SIOCIWFIRSTPRIV_15
+}')
diff --git a/vendor/qcom/common/irsc_util.te b/vendor/qcom/common/irsc_util.te
new file mode 100644
index 0000000..bf37dd5
--- /dev/null
+++ b/vendor/qcom/common/irsc_util.te
@@ -0,0 +1,3 @@
+type irsc_util, domain;
+type irsc_util_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(irsc_util) \ No newline at end of file
diff --git a/vendor/qcom/common/location.te b/vendor/qcom/common/location.te
new file mode 100644
index 0000000..267faf3
--- /dev/null
+++ b/vendor/qcom/common/location.te
@@ -0,0 +1,3 @@
+type location, domain;
+type location_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(location)
diff --git a/vendor/qcom/common/logdumpd.te b/vendor/qcom/common/logdumpd.te
new file mode 100644
index 0000000..e85783e
--- /dev/null
+++ b/vendor/qcom/common/logdumpd.te
@@ -0,0 +1,3 @@
+type logdumpd, domain;
+type logdumpd_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(logdumpd) \ No newline at end of file
diff --git a/vendor/qcom/common/mcStarter.te b/vendor/qcom/common/mcStarter.te
new file mode 100644
index 0000000..383e571
--- /dev/null
+++ b/vendor/qcom/common/mcStarter.te
@@ -0,0 +1,3 @@
+type mcStarter, domain;
+type mcStarter_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(mcStarter) \ No newline at end of file
diff --git a/vendor/qcom/common/mdm_helper.te b/vendor/qcom/common/mdm_helper.te
new file mode 100644
index 0000000..7911e1b
--- /dev/null
+++ b/vendor/qcom/common/mdm_helper.te
@@ -0,0 +1,3 @@
+type mdm_helper, domain;
+type mdm_helper_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(mdm_helper);
diff --git a/vendor/qcom/common/mdtp.te b/vendor/qcom/common/mdtp.te
new file mode 100644
index 0000000..6579bba
--- /dev/null
+++ b/vendor/qcom/common/mdtp.te
@@ -0,0 +1,2 @@
+type mdtpdaemon, domain;
+type mdtpdaemon_exec, exec_type, vendor_file_type, file_type;
diff --git a/vendor/qcom/common/mdtpservice_app.te b/vendor/qcom/common/mdtpservice_app.te
new file mode 100644
index 0000000..75eefe7
--- /dev/null
+++ b/vendor/qcom/common/mdtpservice_app.te
@@ -0,0 +1 @@
+type mdtpservice_app, domain;
diff --git a/vendor/qcom/common/mlid.te b/vendor/qcom/common/mlid.te
new file mode 100644
index 0000000..73f298a
--- /dev/null
+++ b/vendor/qcom/common/mlid.te
@@ -0,0 +1,3 @@
+type mlid, domain, mlstrustedsubject;
+type mlid_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(mlid) \ No newline at end of file
diff --git a/vendor/qcom/common/mm-pp-daemon.te b/vendor/qcom/common/mm-pp-daemon.te
new file mode 100644
index 0000000..ff1b53a
--- /dev/null
+++ b/vendor/qcom/common/mm-pp-daemon.te
@@ -0,0 +1,3 @@
+type mm-pp-daemon, domain;
+type mm-pp-daemon_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(mm-pp-daemon) \ No newline at end of file
diff --git a/vendor/qcom/common/mm-qcamerad.te b/vendor/qcom/common/mm-qcamerad.te
new file mode 100644
index 0000000..9828640
--- /dev/null
+++ b/vendor/qcom/common/mm-qcamerad.te
@@ -0,0 +1,3 @@
+type mm-qcamerad, domain;
+type mm-qcamerad_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(mm-qcamerad) \ No newline at end of file
diff --git a/vendor/qcom/common/mmi.te b/vendor/qcom/common/mmi.te
new file mode 100755
index 0000000..d694ebf
--- /dev/null
+++ b/vendor/qcom/common/mmi.te
@@ -0,0 +1,3 @@
+type vendor_mmi, domain;
+type vendor_mmi_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(vendor_mmi) \ No newline at end of file
diff --git a/vendor/qcom/common/msm_irqbalanced.te b/vendor/qcom/common/msm_irqbalanced.te
new file mode 100644
index 0000000..118a199
--- /dev/null
+++ b/vendor/qcom/common/msm_irqbalanced.te
@@ -0,0 +1,3 @@
+type msm_irqbalanced, domain;
+type msm_irqbalanced_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(msm_irqbalanced) \ No newline at end of file
diff --git a/vendor/qcom/common/netmgrd.te b/vendor/qcom/common/netmgrd.te
new file mode 100644
index 0000000..e4d0f49
--- /dev/null
+++ b/vendor/qcom/common/netmgrd.te
@@ -0,0 +1,3 @@
+type netmgrd, domain;
+type netmgrd_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(netmgrd)
diff --git a/vendor/qcom/common/nqnfcinfo.te b/vendor/qcom/common/nqnfcinfo.te
new file mode 100644
index 0000000..19fa508
--- /dev/null
+++ b/vendor/qcom/common/nqnfcinfo.te
@@ -0,0 +1,3 @@
+type nqnfcinfo, domain;
+type nqnfcinfo_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(nqnfcinfo) \ No newline at end of file
diff --git a/vendor/qcom/common/pd_services.te b/vendor/qcom/common/pd_services.te
new file mode 100644
index 0000000..c88fd09
--- /dev/null
+++ b/vendor/qcom/common/pd_services.te
@@ -0,0 +1,3 @@
+type vendor_pd_mapper, domain;
+type vendor_pd_mapper_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(vendor_pd_mapper);
diff --git a/vendor/qcom/common/peripheral_manager.te b/vendor/qcom/common/peripheral_manager.te
new file mode 100644
index 0000000..42d4ca6
--- /dev/null
+++ b/vendor/qcom/common/peripheral_manager.te
@@ -0,0 +1,3 @@
+type vendor_per_mgr, domain;
+type vendor_per_mgr_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(vendor_per_mgr);
diff --git a/vendor/qcom/common/port-bridge.te b/vendor/qcom/common/port-bridge.te
new file mode 100644
index 0000000..a438eac
--- /dev/null
+++ b/vendor/qcom/common/port-bridge.te
@@ -0,0 +1,3 @@
+type port-bridge, domain;
+type port-bridge_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(port-bridge) \ No newline at end of file
diff --git a/vendor/qcom/common/power_off_alarm.te b/vendor/qcom/common/power_off_alarm.te
new file mode 100644
index 0000000..ae1f811
--- /dev/null
+++ b/vendor/qcom/common/power_off_alarm.te
@@ -0,0 +1,3 @@
+type power_off_alarm, domain;
+type power_off_alarm_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(power_off_alarm) \ No newline at end of file
diff --git a/vendor/qcom/common/poweroffalarm_app.te b/vendor/qcom/common/poweroffalarm_app.te
new file mode 100644
index 0000000..593d0a2
--- /dev/null
+++ b/vendor/qcom/common/poweroffalarm_app.te
@@ -0,0 +1 @@
+type poweroffalarm_app, domain;
diff --git a/vendor/qcom/common/poweroffhandler.te b/vendor/qcom/common/poweroffhandler.te
new file mode 100644
index 0000000..066752d
--- /dev/null
+++ b/vendor/qcom/common/poweroffhandler.te
@@ -0,0 +1,3 @@
+type poweroffhandler, domain;
+type poweroffhandler_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(poweroffhandler) \ No newline at end of file
diff --git a/vendor/qcom/common/property.te b/vendor/qcom/common/property.te
new file mode 100644
index 0000000..619de7a
--- /dev/null
+++ b/vendor/qcom/common/property.te
@@ -0,0 +1,80 @@
+type uicc_prop, property_type;
+type qcom_ims_prop, property_type;
+type ctl_vendor_qmuxd_prop, property_type;
+type ctl_vendor_netmgrd_prop, property_type;
+type ctl_vendor_port-bridge_prop, property_type;
+type ctl_qcrild_prop, property_type;
+type vendor_tee_listener_prop, property_type;
+type ctl_vendor_rild_prop, property_type;
+type vendor_disable_spu_prop, property_type;
+type ctl_LKCore_prop, property_type;
+type usf_prop, property_type;
+type factory_ota_prop, property_type;
+type freq_prop, property_type;
+type vendor_dataqti_prop, property_type;
+type vendor_dataadpl_prop, property_type;
+type cnd_vendor_prop, property_type;
+type sensors_prop, property_type;
+type slpi_prop, property_type;
+type msm_irqbalance_prop, property_type;
+type msm_irqbl_sdm630_prop, property_type;
+type camera_prop, property_type;
+type spcomlib_prop, property_type;
+type vendor_display_prop, property_type;
+type vendor_device_prop, property_type;
+type scr_enabled_prop, property_type;
+type bg_boot_complete_prop, property_type;
+type opengles_prop, property_type;
+type mdm_helper_prop, property_type;
+type vendor_mpctl_prop, property_type;
+type vendor_iop_prop, property_type;
+type vendor_preobtain_prop, property_type;
+type vendor_am_prop, property_type;
+type vendor_gralloc_prop, property_type;
+type fm_prop, property_type;
+type chgdiabled_prop, property_type;
+type vendor_xlat_prop, property_type;
+type location_prop, property_type;
+type qemu_hw_mainkeys_prop, property_type;
+type vendor_usb_prop, property_type;
+type public_vendor_system_prop, property_type;
+type vendor_coresight_prop, property_type;
+type public_vendor_default_prop, property_type;
+type ctl_hbtp_prop, property_type;
+type vendor_alarm_boot_prop, property_type;
+type dolby_prop, property_type;
+type vendor_wifi_ftmd_prop, property_type;
+type wigig_prop, property_type;
+type fst_prop, property_type;
+type ctl_vendor_wigigsvc_prop, property_type;
+type hwui_prop, property_type;
+type graphics_vulkan_prop, property_type;
+type bservice_prop, property_type;
+type reschedule_service_prop, property_type;
+type vendor_boot_mode_prop, property_type;
+type nfc_nq_prop, property_type;
+type vendor_rild_libpath_prop, property_type;
+type vendor_per_mgr_state_prop, property_type;
+type vendor_system_prop, property_type;
+type vendor_bluetooth_prop, property_type;
+type ctl_vendor_hbtp_prop, property_type;
+type ctl_vendor_mmid_prop, property_type;
+type vendor_qdma_prop, property_type;
+type wfd_service_prop, property_type;
+type wfd_debug_prop, property_type;
+type ctl_vendor_imsrcsservice_prop, property_type;
+type vendor_mmi_prop, property_type;
+type vendor_time_service_prop, property_type;
+type vendor_radio_prop, property_type;
+type vendor_audio_prop, property_type;
+type vendor_ssr_prop, property_type;
+type vendor_pd_locater_dbg_prop, property_type;
+type vendor_qdcmss_prop, property_type;
+type vendor_softap_prop, property_type;
+type mm_parser_prop, property_type;
+type mm_video_prop, property_type;
+type ctl_vendor_rmt_storage_prop, property_type;
+type vendor_wifi_version, property_type;
+type vendor_cnss_diag_prop, property_type;
+type vendor_modem_diag_prop, property_type;
+type vendor_ramdump_prop, property_type;
diff --git a/vendor/qcom/common/property_contexts b/vendor/qcom/common/property_contexts
new file mode 100644
index 0000000..0febeb7
--- /dev/null
+++ b/vendor/qcom/common/property_contexts
@@ -0,0 +1,81 @@
+# vendor_audio_prop
+audio.snd_card.open.retries u:object_r:vendor_audio_prop:s0
+
+ro.boot.sota u:object_r:factory_ota_prop:s0
+persist.vendor.factoryota.reboot u:object_r:exported_system_prop:s0
+persist.vendor.radio.bootwithlpm u:object_r:exported_system_prop:s0
+
+audio.volume.listener.dump u:object_r:vendor_audio_prop:s0
+audio.volume.headset.gain.depcal u:object_r:vendor_audio_prop:s0
+audio_hal.in_period_size u:object_r:vendor_audio_prop:s0
+audio_hal.period_multiplier u:object_r:vendor_audio_prop:s0
+audio_hal.period_size u:object_r:vendor_audio_prop:s0
+persist.audio.dualmic.config u:object_r:vendor_audio_prop:s0
+
+persist.audio.fluence.speaker u:object_r:vendor_audio_prop:s0
+persist.audio.fluence.voicecall u:object_r:vendor_audio_prop:s0
+persist.audio.fluence.voicerec u:object_r:vendor_audio_prop:s0
+
+persist.camera. u:object_r:camera_prop:s0
+vendor.debug.camera. u:object_r:camera_prop:s0
+persist.vendor.camera. u:object_r:camera_prop:s0
+persist.vendor.sys.cnd u:object_r:cnd_vendor_prop:s0
+persist.vendor.cnd.wqe u:object_r:cnd_vendor_prop:s0
+persist.vendor.cne.feature u:object_r:cnd_vendor_prop:s0
+persist.vendor.cne.logging.qxdm u:object_r:cnd_vendor_prop:s0
+persist.vendor.net.doxlat u:object_r:vendor_xlat_prop:s0
+persist.vendor.radio u:object_r:vendor_radio_prop:s0
+persist.vendor.sys.modem.diag. u:object_r:vendor_modem_diag_prop:s0
+
+# vendor_bluetooth_prop
+persist.vendor.bluetooth.a4wp u:object_r:vendor_bluetooth_prop:s0
+persist.vendor.bluetooth.csoc.cnt u:object_r:vendor_bluetooth_prop:s0
+persist.vendor.service.bdroid.fwsnoop u:object_r:vendor_bluetooth_prop:s0
+persist.vendor.service.bdroid.sibs u:object_r:vendor_bluetooth_prop:s0
+persist.vendor.service.bdroid.snooplog u:object_r:vendor_bluetooth_prop:s0
+persist.vendor.service.bdroid.soclog u:object_r:vendor_bluetooth_prop:s0
+persist.vendor.service.bdroid.ssrlvl u:object_r:vendor_bluetooth_prop:s0
+ro.vendor.bluetooth.emb_wp_mode u:object_r:vendor_bluetooth_prop:s0
+ro.vendor.bluetooth.wipower u:object_r:vendor_bluetooth_prop:s0
+persist.vendor.bt.soc.scram_freqs u:object_r:vendor_bluetooth_prop:s0
+
+ro.qc.sdk.audio.fluencetype u:object_r:vendor_audio_prop:s0
+ro.vendor.ril. u:object_r:vendor_radio_prop:s0
+ro.boot.ramdump u:object_r:vendor_ramdump_prop:s0
+
+# vendor display prop
+vendor.gralloc.disable_ahardware_buffer u:object_r:vendor_display_prop:s0
+vendor.gralloc.use_system_heap_for_sensors u:object_r:vendor_display_prop:s0
+vendor.gralloc.disable_ubwc u:object_r:vendor_display_prop:s0
+vendor.debug.egl.changepixelformat u:object_r:vendor_display_prop:s0
+vendor.debug.egl.profiler u:object_r:vendor_display_prop:s0
+vendor.debug.prerotation.disable u:object_r:vendor_display_prop:s0
+vendor.debug.egl.swapinterval u:object_r:vendor_display_prop:s0
+ro.vendor.graphics.memory u:object_r:vendor_display_prop:s0
+
+vendor.debug.ramdump. u:object_r:vendor_ramdump_prop:s0
+vendor.ims. u:object_r:qcom_ims_prop:s0
+vendor.peripheral. u:object_r:vendor_per_mgr_state_prop:s0
+vendor.sys.listeners.registered u:object_r:vendor_tee_listener_prop:s0
+# Disable SPU
+vendor.gatekeeper.disable_spu u:object_r:vendor_disable_spu_prop:s0
+vendor.usb. u:object_r:vendor_usb_prop:s0
+vendor.wlan.driver.version u:object_r:vendor_wifi_version:s0
+vendor.wlan.firmware.version u:object_r:vendor_wifi_version:s0
+vendor.radio u:object_r:vendor_radio_prop:s0
+vendor.spcom. u:object_r:spcomlib_prop:s0
+vendor.sys.modem.diag. u:object_r:vendor_modem_diag_prop:s0
+vendor.debug.ssrdump u:object_r:vendor_ssr_prop:s0
+
+persist.vendor.sys.cnss. u:object_r:vendor_cnss_diag_prop:s0
+persist.vendor.sys.ssr. u:object_r:vendor_ssr_prop:s0
+
+ctl.vendor.rmt_storage u:object_r:ctl_vendor_rmt_storage_prop:s0
+
+vendor.sys.slpi.firmware.version u:object_r:public_vendor_system_prop:s0
+
+vendor.media.ecoservice.log. u:object_r:ecoservice_prop:s0
+
+persist.vendor.data.netmgr.log_to_file u:object_r:vendor_default_prop:s0
+persist.vendor.ims. u:object_r:qcom_ims_prop:s0
+persist.vendor.qti.telephony.vt_cam_interface u:object_r:public_vendor_default_prop:s0
diff --git a/vendor/qcom/common/qcomsysd.te b/vendor/qcom/common/qcomsysd.te
new file mode 100755
index 0000000..1375d51
--- /dev/null
+++ b/vendor/qcom/common/qcomsysd.te
@@ -0,0 +1,3 @@
+type vendor_qcomsysd, domain;
+type vendor_qcomsysd_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(vendor_qcomsysd);
diff --git a/vendor/qcom/common/qdcm-ss.te b/vendor/qcom/common/qdcm-ss.te
new file mode 100644
index 0000000..2b62429
--- /dev/null
+++ b/vendor/qcom/common/qdcm-ss.te
@@ -0,0 +1,3 @@
+type qdcm-ss, domain;
+type qdcm-ss_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(qdcm-ss) \ No newline at end of file
diff --git a/vendor/qcom/common/qdma_app.te b/vendor/qcom/common/qdma_app.te
new file mode 100644
index 0000000..ed6215a
--- /dev/null
+++ b/vendor/qcom/common/qdma_app.te
@@ -0,0 +1 @@
+type qdma_app, domain;
diff --git a/vendor/qcom/common/qdmastatsd.te b/vendor/qcom/common/qdmastatsd.te
new file mode 100644
index 0000000..e5b517e
--- /dev/null
+++ b/vendor/qcom/common/qdmastatsd.te
@@ -0,0 +1,3 @@
+type qdmastatsd, domain, mlstrustedsubject;
+type qdmastatsd_exec, file_type, vendor_file_type, exec_type;
+init_daemon_domain(qdmastatsd) \ No newline at end of file
diff --git a/vendor/qcom/common/qfp-daemon.te b/vendor/qcom/common/qfp-daemon.te
new file mode 100644
index 0000000..005bdcd
--- /dev/null
+++ b/vendor/qcom/common/qfp-daemon.te
@@ -0,0 +1,3 @@
+type qfp-daemon, domain;
+type qfp-daemon_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(qfp-daemon) \ No newline at end of file
diff --git a/vendor/qcom/common/qlogd.te b/vendor/qcom/common/qlogd.te
new file mode 100644
index 0000000..81bcdc6
--- /dev/null
+++ b/vendor/qcom/common/qlogd.te
@@ -0,0 +1,3 @@
+type qlogd, domain, mlstrustedsubject;
+type qlogd_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(qlogd) \ No newline at end of file
diff --git a/vendor/qcom/common/qmuxd.te b/vendor/qcom/common/qmuxd.te
new file mode 100644
index 0000000..78e0ded
--- /dev/null
+++ b/vendor/qcom/common/qmuxd.te
@@ -0,0 +1,3 @@
+type qmuxd, domain;
+type qmuxd_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(qmuxd) \ No newline at end of file
diff --git a/vendor/qcom/common/qrtr.te b/vendor/qcom/common/qrtr.te
new file mode 100644
index 0000000..f82f22e
--- /dev/null
+++ b/vendor/qcom/common/qrtr.te
@@ -0,0 +1,3 @@
+type qrtr, domain;
+type qrtr_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(qrtr) \ No newline at end of file
diff --git a/vendor/qcom/common/qsee_svc_app.te b/vendor/qcom/common/qsee_svc_app.te
new file mode 100644
index 0000000..a42b8dc
--- /dev/null
+++ b/vendor/qcom/common/qsee_svc_app.te
@@ -0,0 +1 @@
+type qsee_svc_app, domain;
diff --git a/vendor/qcom/common/qseeproxy.te b/vendor/qcom/common/qseeproxy.te
new file mode 100644
index 0000000..c5ed760
--- /dev/null
+++ b/vendor/qcom/common/qseeproxy.te
@@ -0,0 +1,3 @@
+type qseeproxy, domain;
+type qseeproxy_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(qseeproxy) \ No newline at end of file
diff --git a/vendor/qcom/common/qti-logkit.te b/vendor/qcom/common/qti-logkit.te
new file mode 100644
index 0000000..b2a19ee
--- /dev/null
+++ b/vendor/qcom/common/qti-logkit.te
@@ -0,0 +1,3 @@
+type qti_logkit, domain, mlstrustedsubject;
+type qti_logkit_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(qti_logkit)
diff --git a/vendor/qcom/common/qti.te b/vendor/qcom/common/qti.te
new file mode 100644
index 0000000..187a9dd
--- /dev/null
+++ b/vendor/qcom/common/qti.te
@@ -0,0 +1,3 @@
+type qti, domain;
+type qti_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(qti) \ No newline at end of file
diff --git a/vendor/qcom/common/qti_logkit_app.te b/vendor/qcom/common/qti_logkit_app.te
new file mode 100644
index 0000000..7344d11
--- /dev/null
+++ b/vendor/qcom/common/qti_logkit_app.te
@@ -0,0 +1 @@
+type qti_logkit_app, domain;
diff --git a/vendor/qcom/common/qtidataservices_app.te b/vendor/qcom/common/qtidataservices_app.te
new file mode 100644
index 0000000..10b08ef
--- /dev/null
+++ b/vendor/qcom/common/qtidataservices_app.te
@@ -0,0 +1 @@
+type qtidataservices_app, domain;
diff --git a/vendor/qcom/common/qvop.te b/vendor/qcom/common/qvop.te
new file mode 100644
index 0000000..eaacdc9
--- /dev/null
+++ b/vendor/qcom/common/qvop.te
@@ -0,0 +1,3 @@
+type qvop-daemon, domain;
+type qvop-daemon_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(qvop-daemon) \ No newline at end of file
diff --git a/vendor/qcom/common/rfs_access.te b/vendor/qcom/common/rfs_access.te
new file mode 100644
index 0000000..2780791
--- /dev/null
+++ b/vendor/qcom/common/rfs_access.te
@@ -0,0 +1,3 @@
+type rfs_access, domain;
+type rfs_access_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(rfs_access) \ No newline at end of file
diff --git a/vendor/qcom/common/ridl.te b/vendor/qcom/common/ridl.te
new file mode 100644
index 0000000..03dfe96
--- /dev/null
+++ b/vendor/qcom/common/ridl.te
@@ -0,0 +1,3 @@
+type RIDL, domain;
+type RIDL_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(RIDL) \ No newline at end of file
diff --git a/vendor/qcom/common/ril_config_service.te b/vendor/qcom/common/ril_config_service.te
new file mode 100644
index 0000000..f657cf5
--- /dev/null
+++ b/vendor/qcom/common/ril_config_service.te
@@ -0,0 +1 @@
+type ril_config_service_app, domain;
diff --git a/vendor/qcom/common/rmt_storage.te b/vendor/qcom/common/rmt_storage.te
new file mode 100644
index 0000000..77d07b9
--- /dev/null
+++ b/vendor/qcom/common/rmt_storage.te
@@ -0,0 +1,3 @@
+type rmt_storage, domain;
+type rmt_storage_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(rmt_storage) \ No newline at end of file
diff --git a/vendor/qcom/common/seapp_contexts b/vendor/qcom/common/seapp_contexts
new file mode 100644
index 0000000..634d0f0
--- /dev/null
+++ b/vendor/qcom/common/seapp_contexts
@@ -0,0 +1,21 @@
+#TODO(b/126137625): moving dataservice app from system to radio process
+#user=radio seinfo=platform name=.dataservices domain=dataservice_app type=radio_data_file
+user=system seinfo=platform name=.dataservices domain=dataservice_app type=system_app_data_file
+
+# Hardware Info Collection
+user=_app seinfo=platform name=com.google.android.hardwareinfo domain=hardware_info_app type=app_data_file levelFrom=user
+
+# Factory OTA
+user=_app seinfo=platform name=com.google.android.factoryota domain=factory_ota_app levelFrom=all
+
+user=radio isPrivApp=true seinfo=platform name=com.google.RilConfigService domain=ril_config_service_app type=app_data_file
+
+user=radio seinfo=platform name=.qtidataservices domain=qtidataservices_app type=radio_data_file
+
+# Domain for connectivity monitor
+user=_app isPrivApp=true seinfo=platform name=com.google.android.connectivitymonitor domain=con_monitor_app type=app_data_file levelFrom=all
+
+user=_app seinfo=platform name=com.qualcomm.qti.services.secureui* domain=secure_ui_service_app levelFrom=all
+
+#Needed for time service apk
+user=_app seinfo=platform name=com.qualcomm.timeservice domain=timeservice_app type=app_data_file
diff --git a/vendor/qcom/common/sec_nvm.te b/vendor/qcom/common/sec_nvm.te
new file mode 100644
index 0000000..98701de
--- /dev/null
+++ b/vendor/qcom/common/sec_nvm.te
@@ -0,0 +1,3 @@
+type sec_nvm, domain;
+type sec_nvm_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(sec_nvm) \ No newline at end of file
diff --git a/vendor/qcom/common/secotad.te b/vendor/qcom/common/secotad.te
new file mode 100644
index 0000000..19513d2
--- /dev/null
+++ b/vendor/qcom/common/secotad.te
@@ -0,0 +1,3 @@
+type secotad, domain;
+type secotad_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(secotad) \ No newline at end of file
diff --git a/vendor/qcom/common/secure_ui_service_app.te b/vendor/qcom/common/secure_ui_service_app.te
new file mode 100644
index 0000000..f1741b6
--- /dev/null
+++ b/vendor/qcom/common/secure_ui_service_app.te
@@ -0,0 +1 @@
+type secure_ui_service_app, domain;
diff --git a/vendor/qcom/common/seemp_health_daemon.te b/vendor/qcom/common/seemp_health_daemon.te
new file mode 100644
index 0000000..2235f89
--- /dev/null
+++ b/vendor/qcom/common/seemp_health_daemon.te
@@ -0,0 +1,3 @@
+type seemp_health_daemon, domain;
+type seemp_health_daemon_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(seemp_health_daemon) \ No newline at end of file
diff --git a/vendor/qcom/common/sensors.te b/vendor/qcom/common/sensors.te
new file mode 100644
index 0000000..ba29f43
--- /dev/null
+++ b/vendor/qcom/common/sensors.te
@@ -0,0 +1,3 @@
+type sensors, domain;
+type sensors_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(sensors) \ No newline at end of file
diff --git a/vendor/qcom/common/service.te b/vendor/qcom/common/service.te
new file mode 100644
index 0000000..14e9153
--- /dev/null
+++ b/vendor/qcom/common/service.te
@@ -0,0 +1,15 @@
+type iqfp_service, service_manager_type;
+type qfp_proxy_service, service_manager_type;
+type atfwd_service, service_manager_type;
+type fidodaemon_service, service_manager_type;
+type seemp_health_daemon_service, service_manager_type;
+type secotad_service, service_manager_type;
+type wbc_service, service_manager_type;
+type dun_service, service_manager_type;
+type imsrcs_service, service_manager_type;
+type improve_touch_service, service_manager_type;
+type usf_service, service_manager_type;
+type dtseagleservice_service, service_manager_type;
+type gba_auth_service, service_manager_type;
+type mdtpdaemon_service, service_manager_type;
+type qtitetherservice_service, service_manager_type;
diff --git a/vendor/qcom/common/spdaemon.te b/vendor/qcom/common/spdaemon.te
new file mode 100644
index 0000000..bcf4fd7
--- /dev/null
+++ b/vendor/qcom/common/spdaemon.te
@@ -0,0 +1,3 @@
+type spdaemon, domain;
+type spdaemon_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(spdaemon) \ No newline at end of file
diff --git a/vendor/qcom/common/ssgqmigd.te b/vendor/qcom/common/ssgqmigd.te
new file mode 100644
index 0000000..c56d0b8
--- /dev/null
+++ b/vendor/qcom/common/ssgqmigd.te
@@ -0,0 +1,3 @@
+type ssgqmigd, domain, mlstrustedsubject;
+type ssgqmigd_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(ssgqmigd) \ No newline at end of file
diff --git a/vendor/qcom/common/ssr_diag.te b/vendor/qcom/common/ssr_diag.te
new file mode 100644
index 0000000..47f00d3
--- /dev/null
+++ b/vendor/qcom/common/ssr_diag.te
@@ -0,0 +1,3 @@
+type vendor_ssr_diag, domain;
+type vendor_ssr_diag_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(vendor_ssr_diag);
diff --git a/vendor/qcom/common/ssr_setup.te b/vendor/qcom/common/ssr_setup.te
new file mode 100644
index 0000000..6b27dab
--- /dev/null
+++ b/vendor/qcom/common/ssr_setup.te
@@ -0,0 +1,3 @@
+type vendor_ssr_setup, domain;
+type vendor_ssr_setup_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(vendor_ssr_setup);
diff --git a/vendor/qcom/common/subsystem_ramdump.te b/vendor/qcom/common/subsystem_ramdump.te
new file mode 100644
index 0000000..8f9b6b1
--- /dev/null
+++ b/vendor/qcom/common/subsystem_ramdump.te
@@ -0,0 +1,3 @@
+type vendor_subsystem_ramdump, domain;
+type vendor_subsystem_ramdump_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(vendor_subsystem_ramdump);
diff --git a/vendor/qcom/common/tbaseLoader.te b/vendor/qcom/common/tbaseLoader.te
new file mode 100644
index 0000000..1488f5e
--- /dev/null
+++ b/vendor/qcom/common/tbaseLoader.te
@@ -0,0 +1,3 @@
+type tbaseLoader, domain;
+type tbaseLoader_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(tbaseLoader) \ No newline at end of file
diff --git a/vendor/qcom/common/thermal-engine.te b/vendor/qcom/common/thermal-engine.te
new file mode 100644
index 0000000..77c8df7
--- /dev/null
+++ b/vendor/qcom/common/thermal-engine.te
@@ -0,0 +1,3 @@
+type thermal-engine, domain;
+type thermal-engine_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(thermal-engine) \ No newline at end of file
diff --git a/vendor/qcom/common/time_daemon.te b/vendor/qcom/common/time_daemon.te
new file mode 100644
index 0000000..69788f9
--- /dev/null
+++ b/vendor/qcom/common/time_daemon.te
@@ -0,0 +1,4 @@
+type time_daemon, domain, mlstrustedsubject;
+type time_daemon_exec, exec_type, vendor_file_type, file_type;
+type time_data_file, file_type, data_file_type;
+init_daemon_domain(time_daemon) \ No newline at end of file
diff --git a/vendor/qcom/common/timeservice_app.te b/vendor/qcom/common/timeservice_app.te
new file mode 100644
index 0000000..b012c24
--- /dev/null
+++ b/vendor/qcom/common/timeservice_app.te
@@ -0,0 +1 @@
+type timeservice_app, domain;
diff --git a/vendor/qcom/common/tlocd.te b/vendor/qcom/common/tlocd.te
new file mode 100644
index 0000000..5bbf713
--- /dev/null
+++ b/vendor/qcom/common/tlocd.te
@@ -0,0 +1,3 @@
+type tlocd, domain;
+type tlocd_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(tlocd) \ No newline at end of file
diff --git a/vendor/qcom/common/touchfusion.te b/vendor/qcom/common/touchfusion.te
new file mode 100644
index 0000000..5e97c3f
--- /dev/null
+++ b/vendor/qcom/common/touchfusion.te
@@ -0,0 +1,3 @@
+type touchfusion, domain;
+type touchfusion_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(touchfusion) \ No newline at end of file
diff --git a/vendor/qcom/common/usb_uicc_daemon.te b/vendor/qcom/common/usb_uicc_daemon.te
new file mode 100644
index 0000000..534f555
--- /dev/null
+++ b/vendor/qcom/common/usb_uicc_daemon.te
@@ -0,0 +1,3 @@
+type usb_uicc_daemon, domain;
+type usb_uicc_daemon_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(usb_uicc_daemon) \ No newline at end of file
diff --git a/vendor/qcom/common/usf.te b/vendor/qcom/common/usf.te
new file mode 100644
index 0000000..5561bac
--- /dev/null
+++ b/vendor/qcom/common/usf.te
@@ -0,0 +1,3 @@
+type usf, domain;
+type usf_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(usf) \ No newline at end of file
diff --git a/vendor/qcom/common/vm_bms.te b/vendor/qcom/common/vm_bms.te
new file mode 100644
index 0000000..e7bfa81
--- /dev/null
+++ b/vendor/qcom/common/vm_bms.te
@@ -0,0 +1,3 @@
+type vm_bms, domain;
+type vm_bms_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(vm_bms) \ No newline at end of file
diff --git a/vendor/qcom/common/vndservice.te b/vendor/qcom/common/vndservice.te
new file mode 100644
index 0000000..a1981a9
--- /dev/null
+++ b/vendor/qcom/common/vndservice.te
@@ -0,0 +1,5 @@
+type vendor_per_mgr_service, vndservice_manager_type;
+type qdisplay_service, vndservice_manager_type;
+type qseeproxy_service, vndservice_manager_type;
+type esepmdaemon_service, vndservice_manager_type;
+type wfdnativemm_service, vndservice_manager_type;
diff --git a/vendor/qcom/common/vndservice_contexts b/vendor/qcom/common/vndservice_contexts
new file mode 100644
index 0000000..71128ba
--- /dev/null
+++ b/vendor/qcom/common/vndservice_contexts
@@ -0,0 +1,2 @@
+display.qservice u:object_r:qdisplay_service:s0
+vendor.qcom.PeripheralManager u:object_r:vendor_per_mgr_service:s0
diff --git a/vendor/qcom/common/vppservice.te b/vendor/qcom/common/vppservice.te
new file mode 100755
index 0000000..8fc9024
--- /dev/null
+++ b/vendor/qcom/common/vppservice.te
@@ -0,0 +1,3 @@
+type vendor_vppservice, domain;
+type vendor_vppservice_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(vendor_vppservice) \ No newline at end of file
diff --git a/vendor/qcom/common/wcnss_service.te b/vendor/qcom/common/wcnss_service.te
new file mode 100644
index 0000000..9dccd3d
--- /dev/null
+++ b/vendor/qcom/common/wcnss_service.te
@@ -0,0 +1,3 @@
+type wcnss_service, domain;
+type wcnss_service_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(wcnss_service) \ No newline at end of file
diff --git a/vendor/qcom/common/wfdhdcphalservice.te b/vendor/qcom/common/wfdhdcphalservice.te
new file mode 100644
index 0000000..61d31e3
--- /dev/null
+++ b/vendor/qcom/common/wfdhdcphalservice.te
@@ -0,0 +1,3 @@
+type wfdhdcphalservice_qti, domain;
+type wfdhdcphalservice_qti_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(wfdhdcphalservice_qti) \ No newline at end of file
diff --git a/vendor/qcom/common/wifi_ftmd.te b/vendor/qcom/common/wifi_ftmd.te
new file mode 100644
index 0000000..355ce21
--- /dev/null
+++ b/vendor/qcom/common/wifi_ftmd.te
@@ -0,0 +1,3 @@
+type wifi_ftmd, domain;
+type wifi_ftmd_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(wifi_ftmd) \ No newline at end of file
diff --git a/vendor/qcom/common/wifidisplayhalservice.te b/vendor/qcom/common/wifidisplayhalservice.te
new file mode 100644
index 0000000..f2535bf
--- /dev/null
+++ b/vendor/qcom/common/wifidisplayhalservice.te
@@ -0,0 +1,3 @@
+type wifidisplayhalservice_qti, domain;
+type wifidisplayhalservice_qti_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(wifidisplayhalservice_qti) \ No newline at end of file
diff --git a/vendor/qcom/common/wigighalsvc.te b/vendor/qcom/common/wigighalsvc.te
new file mode 100644
index 0000000..338e09f
--- /dev/null
+++ b/vendor/qcom/common/wigighalsvc.te
@@ -0,0 +1,3 @@
+type wigighalsvc, domain;
+type wigighalsvc_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(wigighalsvc) \ No newline at end of file
diff --git a/vendor/qcom/common/wigignpt.te b/vendor/qcom/common/wigignpt.te
new file mode 100644
index 0000000..892b08c
--- /dev/null
+++ b/vendor/qcom/common/wigignpt.te
@@ -0,0 +1,3 @@
+type wigignpt, domain;
+type wigignpt_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(wigignpt) \ No newline at end of file