diff options
author | Tri Vo <trong@google.com> | 2018-01-16 17:39:00 -0800 |
---|---|---|
committer | Tri Vo <trong@google.com> | 2018-01-16 17:41:58 -0800 |
commit | 5cedca462b42978eafe79ed221731c512772a473 (patch) | |
tree | 8dd6a3d8740737554d2fc5a4b0d51e008a780dfa | |
parent | b469b7ec7289a89c72aabe9d4adb61fe5aa57b14 (diff) | |
download | angler-5cedca462b42978eafe79ed221731c512772a473.tar.gz |
Mark files in /vendor as vendor_file_type.
The following files and correspoding selinux types need vendor_file_type
attribute:
/vendor/bin/ATFWD-daemon u:object_r:atfwd_exec:s0
/vendor/bin/cnd u:object_r:cnd_exec:s0
/vendor/bin/imscmservice u:object_r:ims_exec:s0
/vendor/bin/irsc_util u:object_r:irsc_util_exec:s0
/vendor/bin/loc_launcher u:object_r:location_exec:s0
/vendor/bin/mm-qcamera-daemon u:object_r:camera_exec:s0
/vendor/bin/msm_irqbalance u:object_r:irqbalance_exec:s0
/vendor/bin/netmgrd u:object_r:netmgrd_exec:s0
/vendor/bin/perfd u:object_r:perfd_exec:s0
/vendor/bin/pm-proxy u:object_r:per_proxy_exec:s0
/vendor/bin/pm-service u:object_r:per_mgr_exec:s0
/vendor/bin/qmuxd u:object_r:qmux_exec:s0
/vendor/bin/rmt_storage u:object_r:rmt_exec:s0
/vendor/bin/thermal-engine u:object_r:thermald_exec:s0
/vendor/bin/time_daemon u:object_r:time_exec:s0
/vendor/bin/nanoapp_cmd u:object_r:nanoapp_cmd_exec:s0
/vendor/bin/diag_test_server u:object_r:diag_exec:s0
/vendor/bin/InputEventFind u:object_r:inputeventfind_exec:s0
/vendor/bin/oem_qmi_server u:object_r:oem_qmi_server_exec:s0
/vendor/bin/qti u:object_r:qti_exec:s0
/vendor/bin/sensortool\.angler u:object_r:sensortool_exec:s0
Test: build angler sepolicy
Change-Id: I5e3cea5f040c7777e452b2af3b660806f4d0b289
-rw-r--r-- | sepolicy/atfwd.te | 2 | ||||
-rw-r--r-- | sepolicy/camera.te | 2 | ||||
-rw-r--r-- | sepolicy/cnd.te | 2 | ||||
-rw-r--r-- | sepolicy/diag.te | 2 | ||||
-rw-r--r-- | sepolicy/ims.te | 2 | ||||
-rw-r--r-- | sepolicy/inputeventfind.te | 2 | ||||
-rw-r--r-- | sepolicy/irqbalance.te | 2 | ||||
-rw-r--r-- | sepolicy/irsc_util.te | 2 | ||||
-rw-r--r-- | sepolicy/location.te | 2 | ||||
-rw-r--r-- | sepolicy/nanoapp_cmd.te | 2 | ||||
-rw-r--r-- | sepolicy/netmgrd.te | 2 | ||||
-rw-r--r-- | sepolicy/oem_qmi_server.te | 2 | ||||
-rw-r--r-- | sepolicy/perfd.te | 2 | ||||
-rw-r--r-- | sepolicy/peripheral_manager.te | 2 | ||||
-rw-r--r-- | sepolicy/peripheral_proxy.te | 2 | ||||
-rw-r--r-- | sepolicy/qmux.te | 2 | ||||
-rw-r--r-- | sepolicy/qti.te | 2 | ||||
-rw-r--r-- | sepolicy/rmt.te | 2 | ||||
-rw-r--r-- | sepolicy/sensortool.te | 2 | ||||
-rw-r--r-- | sepolicy/thermald.te | 2 | ||||
-rw-r--r-- | sepolicy/time.te | 2 |
21 files changed, 21 insertions, 21 deletions
diff --git a/sepolicy/atfwd.te b/sepolicy/atfwd.te index 20f6ad1..7185537 100644 --- a/sepolicy/atfwd.te +++ b/sepolicy/atfwd.te @@ -1,5 +1,5 @@ type atfwd, domain, device_domain_deprecated; -type atfwd_exec, exec_type, file_type; +type atfwd_exec, exec_type, vendor_file_type, file_type; # Started by init init_daemon_domain(atfwd) diff --git a/sepolicy/camera.te b/sepolicy/camera.te index fdf6394..9077351 100644 --- a/sepolicy/camera.te +++ b/sepolicy/camera.te @@ -1,5 +1,5 @@ type camera, domain, device_domain_deprecated; -type camera_exec, exec_type, file_type; +type camera_exec, exec_type, vendor_file_type, file_type; # Started by init init_daemon_domain(camera) diff --git a/sepolicy/cnd.te b/sepolicy/cnd.te index 78bb2bb..b6eebb5 100644 --- a/sepolicy/cnd.te +++ b/sepolicy/cnd.te @@ -1,5 +1,5 @@ type cnd, domain, device_domain_deprecated; -type cnd_exec, exec_type, file_type; +type cnd_exec, exec_type, vendor_file_type, file_type; # Started by init init_daemon_domain(cnd) diff --git a/sepolicy/diag.te b/sepolicy/diag.te index 1d57e49..ee7ba38 100644 --- a/sepolicy/diag.te +++ b/sepolicy/diag.te @@ -1,4 +1,4 @@ type diag, domain, device_domain_deprecated; -type diag_exec, exec_type, file_type; +type diag_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(diag) diff --git a/sepolicy/ims.te b/sepolicy/ims.te index 2fe22a6..adb6e8b 100644 --- a/sepolicy/ims.te +++ b/sepolicy/ims.te @@ -1,5 +1,5 @@ type ims, domain, device_domain_deprecated; -type ims_exec, exec_type, file_type; +type ims_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(ims) diff --git a/sepolicy/inputeventfind.te b/sepolicy/inputeventfind.te index 7408382..b291dbb 100644 --- a/sepolicy/inputeventfind.te +++ b/sepolicy/inputeventfind.te @@ -1,5 +1,5 @@ type inputeventfind, domain, device_domain_deprecated; -type inputeventfind_exec, exec_type, file_type; +type inputeventfind_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(inputeventfind) diff --git a/sepolicy/irqbalance.te b/sepolicy/irqbalance.te index bfc33b0..912948a 100644 --- a/sepolicy/irqbalance.te +++ b/sepolicy/irqbalance.te @@ -1,5 +1,5 @@ type irqbalance, domain, device_domain_deprecated; -type irqbalance_exec, exec_type, file_type; +type irqbalance_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(irqbalance); diff --git a/sepolicy/irsc_util.te b/sepolicy/irsc_util.te index f2fb7a3..e2e6a86 100644 --- a/sepolicy/irsc_util.te +++ b/sepolicy/irsc_util.te @@ -1,5 +1,5 @@ type irsc_util, domain, device_domain_deprecated; -type irsc_util_exec, exec_type, file_type; +type irsc_util_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(irsc_util); diff --git a/sepolicy/location.te b/sepolicy/location.te index ae24d54..815273f 100644 --- a/sepolicy/location.te +++ b/sepolicy/location.te @@ -1,5 +1,5 @@ type location, domain, device_domain_deprecated; -type location_exec, exec_type, file_type; +type location_exec, exec_type, vendor_file_type, file_type; # Started by init init_daemon_domain(location) diff --git a/sepolicy/nanoapp_cmd.te b/sepolicy/nanoapp_cmd.te index 9bb2b12..c4f5b3e 100644 --- a/sepolicy/nanoapp_cmd.te +++ b/sepolicy/nanoapp_cmd.te @@ -1,5 +1,5 @@ type nanoapp_cmd, domain; -type nanoapp_cmd_exec, exec_type, file_type; +type nanoapp_cmd_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(nanoapp_cmd) diff --git a/sepolicy/netmgrd.te b/sepolicy/netmgrd.te index e8eed07..6a7b6d4 100644 --- a/sepolicy/netmgrd.te +++ b/sepolicy/netmgrd.te @@ -1,6 +1,6 @@ # Network utilities (radio process) type netmgrd, domain, device_domain_deprecated; -type netmgrd_exec, exec_type, file_type; +type netmgrd_exec, exec_type, vendor_file_type, file_type; # Started by init init_daemon_domain(netmgrd) diff --git a/sepolicy/oem_qmi_server.te b/sepolicy/oem_qmi_server.te index f5ef8c9..f3f3d7f 100644 --- a/sepolicy/oem_qmi_server.te +++ b/sepolicy/oem_qmi_server.te @@ -1,5 +1,5 @@ type oem_qmi_server, domain, device_domain_deprecated, mlstrustedsubject; -type oem_qmi_server_exec, exec_type, file_type; +type oem_qmi_server_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(oem_qmi_server) diff --git a/sepolicy/perfd.te b/sepolicy/perfd.te index 09cf9f3..b5044e1 100644 --- a/sepolicy/perfd.te +++ b/sepolicy/perfd.te @@ -1,5 +1,5 @@ type perfd, domain, device_domain_deprecated; -type perfd_exec, exec_type, file_type; +type perfd_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(perfd) diff --git a/sepolicy/peripheral_manager.te b/sepolicy/peripheral_manager.te index 05bc266..dbe59ae 100644 --- a/sepolicy/peripheral_manager.te +++ b/sepolicy/peripheral_manager.te @@ -1,5 +1,5 @@ type per_mgr, domain, device_domain_deprecated; -type per_mgr_exec, exec_type, file_type; +type per_mgr_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(per_mgr); allow per_mgr shared_log_device:chr_file rw_file_perms; diff --git a/sepolicy/peripheral_proxy.te b/sepolicy/peripheral_proxy.te index 547ba5c..0a9f8b7 100644 --- a/sepolicy/peripheral_proxy.te +++ b/sepolicy/peripheral_proxy.te @@ -1,5 +1,5 @@ type per_proxy, domain, device_domain_deprecated; -type per_proxy_exec, exec_type, file_type; +type per_proxy_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(per_proxy); binder_use(per_proxy) diff --git a/sepolicy/qmux.te b/sepolicy/qmux.te index 8b8de37..d65d1da 100644 --- a/sepolicy/qmux.te +++ b/sepolicy/qmux.te @@ -1,6 +1,6 @@ # Qualcomm Management Interface Multiplexer type qmux, domain, device_domain_deprecated; -type qmux_exec, exec_type, file_type; +type qmux_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(qmux) diff --git a/sepolicy/qti.te b/sepolicy/qti.te index 39f80a0..0cc7c31 100644 --- a/sepolicy/qti.te +++ b/sepolicy/qti.te @@ -1,5 +1,5 @@ type qti, domain, device_domain_deprecated; -type qti_exec, exec_type, file_type; +type qti_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(qti) diff --git a/sepolicy/rmt.te b/sepolicy/rmt.te index e57e1ac..fd1594a 100644 --- a/sepolicy/rmt.te +++ b/sepolicy/rmt.te @@ -1,6 +1,6 @@ # remote storage process type rmt, domain, device_domain_deprecated; -type rmt_exec, exec_type, file_type; +type rmt_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(rmt) diff --git a/sepolicy/sensortool.te b/sepolicy/sensortool.te index ce13dd0..14a4845 100644 --- a/sepolicy/sensortool.te +++ b/sepolicy/sensortool.te @@ -1,5 +1,5 @@ type sensortool, domain, device_domain_deprecated; -type sensortool_exec, exec_type, file_type; +type sensortool_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(sensortool) diff --git a/sepolicy/thermald.te b/sepolicy/thermald.te index df974cc..48fc2d0 100644 --- a/sepolicy/thermald.te +++ b/sepolicy/thermald.te @@ -1,5 +1,5 @@ type thermald, domain, device_domain_deprecated; -type thermald_exec, exec_type, file_type; +type thermald_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(thermald) diff --git a/sepolicy/time.te b/sepolicy/time.te index e1048d9..82db267 100644 --- a/sepolicy/time.te +++ b/sepolicy/time.te @@ -1,5 +1,5 @@ type time, domain, device_domain_deprecated; -type time_exec, exec_type, file_type; +type time_exec, exec_type, vendor_file_type, file_type; # Started by init init_daemon_domain(time) |