summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTri Vo <trong@google.com>2018-01-16 17:39:00 -0800
committerTri Vo <trong@google.com>2018-01-16 17:41:58 -0800
commit5cedca462b42978eafe79ed221731c512772a473 (patch)
tree8dd6a3d8740737554d2fc5a4b0d51e008a780dfa
parentb469b7ec7289a89c72aabe9d4adb61fe5aa57b14 (diff)
downloadangler-5cedca462b42978eafe79ed221731c512772a473.tar.gz
Mark files in /vendor as vendor_file_type.
The following files and correspoding selinux types need vendor_file_type attribute: /vendor/bin/ATFWD-daemon u:object_r:atfwd_exec:s0 /vendor/bin/cnd u:object_r:cnd_exec:s0 /vendor/bin/imscmservice u:object_r:ims_exec:s0 /vendor/bin/irsc_util u:object_r:irsc_util_exec:s0 /vendor/bin/loc_launcher u:object_r:location_exec:s0 /vendor/bin/mm-qcamera-daemon u:object_r:camera_exec:s0 /vendor/bin/msm_irqbalance u:object_r:irqbalance_exec:s0 /vendor/bin/netmgrd u:object_r:netmgrd_exec:s0 /vendor/bin/perfd u:object_r:perfd_exec:s0 /vendor/bin/pm-proxy u:object_r:per_proxy_exec:s0 /vendor/bin/pm-service u:object_r:per_mgr_exec:s0 /vendor/bin/qmuxd u:object_r:qmux_exec:s0 /vendor/bin/rmt_storage u:object_r:rmt_exec:s0 /vendor/bin/thermal-engine u:object_r:thermald_exec:s0 /vendor/bin/time_daemon u:object_r:time_exec:s0 /vendor/bin/nanoapp_cmd u:object_r:nanoapp_cmd_exec:s0 /vendor/bin/diag_test_server u:object_r:diag_exec:s0 /vendor/bin/InputEventFind u:object_r:inputeventfind_exec:s0 /vendor/bin/oem_qmi_server u:object_r:oem_qmi_server_exec:s0 /vendor/bin/qti u:object_r:qti_exec:s0 /vendor/bin/sensortool\.angler u:object_r:sensortool_exec:s0 Test: build angler sepolicy Change-Id: I5e3cea5f040c7777e452b2af3b660806f4d0b289
-rw-r--r--sepolicy/atfwd.te2
-rw-r--r--sepolicy/camera.te2
-rw-r--r--sepolicy/cnd.te2
-rw-r--r--sepolicy/diag.te2
-rw-r--r--sepolicy/ims.te2
-rw-r--r--sepolicy/inputeventfind.te2
-rw-r--r--sepolicy/irqbalance.te2
-rw-r--r--sepolicy/irsc_util.te2
-rw-r--r--sepolicy/location.te2
-rw-r--r--sepolicy/nanoapp_cmd.te2
-rw-r--r--sepolicy/netmgrd.te2
-rw-r--r--sepolicy/oem_qmi_server.te2
-rw-r--r--sepolicy/perfd.te2
-rw-r--r--sepolicy/peripheral_manager.te2
-rw-r--r--sepolicy/peripheral_proxy.te2
-rw-r--r--sepolicy/qmux.te2
-rw-r--r--sepolicy/qti.te2
-rw-r--r--sepolicy/rmt.te2
-rw-r--r--sepolicy/sensortool.te2
-rw-r--r--sepolicy/thermald.te2
-rw-r--r--sepolicy/time.te2
21 files changed, 21 insertions, 21 deletions
diff --git a/sepolicy/atfwd.te b/sepolicy/atfwd.te
index 20f6ad1..7185537 100644
--- a/sepolicy/atfwd.te
+++ b/sepolicy/atfwd.te
@@ -1,5 +1,5 @@
type atfwd, domain, device_domain_deprecated;
-type atfwd_exec, exec_type, file_type;
+type atfwd_exec, exec_type, vendor_file_type, file_type;
# Started by init
init_daemon_domain(atfwd)
diff --git a/sepolicy/camera.te b/sepolicy/camera.te
index fdf6394..9077351 100644
--- a/sepolicy/camera.te
+++ b/sepolicy/camera.te
@@ -1,5 +1,5 @@
type camera, domain, device_domain_deprecated;
-type camera_exec, exec_type, file_type;
+type camera_exec, exec_type, vendor_file_type, file_type;
# Started by init
init_daemon_domain(camera)
diff --git a/sepolicy/cnd.te b/sepolicy/cnd.te
index 78bb2bb..b6eebb5 100644
--- a/sepolicy/cnd.te
+++ b/sepolicy/cnd.te
@@ -1,5 +1,5 @@
type cnd, domain, device_domain_deprecated;
-type cnd_exec, exec_type, file_type;
+type cnd_exec, exec_type, vendor_file_type, file_type;
# Started by init
init_daemon_domain(cnd)
diff --git a/sepolicy/diag.te b/sepolicy/diag.te
index 1d57e49..ee7ba38 100644
--- a/sepolicy/diag.te
+++ b/sepolicy/diag.te
@@ -1,4 +1,4 @@
type diag, domain, device_domain_deprecated;
-type diag_exec, exec_type, file_type;
+type diag_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(diag)
diff --git a/sepolicy/ims.te b/sepolicy/ims.te
index 2fe22a6..adb6e8b 100644
--- a/sepolicy/ims.te
+++ b/sepolicy/ims.te
@@ -1,5 +1,5 @@
type ims, domain, device_domain_deprecated;
-type ims_exec, exec_type, file_type;
+type ims_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(ims)
diff --git a/sepolicy/inputeventfind.te b/sepolicy/inputeventfind.te
index 7408382..b291dbb 100644
--- a/sepolicy/inputeventfind.te
+++ b/sepolicy/inputeventfind.te
@@ -1,5 +1,5 @@
type inputeventfind, domain, device_domain_deprecated;
-type inputeventfind_exec, exec_type, file_type;
+type inputeventfind_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(inputeventfind)
diff --git a/sepolicy/irqbalance.te b/sepolicy/irqbalance.te
index bfc33b0..912948a 100644
--- a/sepolicy/irqbalance.te
+++ b/sepolicy/irqbalance.te
@@ -1,5 +1,5 @@
type irqbalance, domain, device_domain_deprecated;
-type irqbalance_exec, exec_type, file_type;
+type irqbalance_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(irqbalance);
diff --git a/sepolicy/irsc_util.te b/sepolicy/irsc_util.te
index f2fb7a3..e2e6a86 100644
--- a/sepolicy/irsc_util.te
+++ b/sepolicy/irsc_util.te
@@ -1,5 +1,5 @@
type irsc_util, domain, device_domain_deprecated;
-type irsc_util_exec, exec_type, file_type;
+type irsc_util_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(irsc_util);
diff --git a/sepolicy/location.te b/sepolicy/location.te
index ae24d54..815273f 100644
--- a/sepolicy/location.te
+++ b/sepolicy/location.te
@@ -1,5 +1,5 @@
type location, domain, device_domain_deprecated;
-type location_exec, exec_type, file_type;
+type location_exec, exec_type, vendor_file_type, file_type;
# Started by init
init_daemon_domain(location)
diff --git a/sepolicy/nanoapp_cmd.te b/sepolicy/nanoapp_cmd.te
index 9bb2b12..c4f5b3e 100644
--- a/sepolicy/nanoapp_cmd.te
+++ b/sepolicy/nanoapp_cmd.te
@@ -1,5 +1,5 @@
type nanoapp_cmd, domain;
-type nanoapp_cmd_exec, exec_type, file_type;
+type nanoapp_cmd_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(nanoapp_cmd)
diff --git a/sepolicy/netmgrd.te b/sepolicy/netmgrd.te
index e8eed07..6a7b6d4 100644
--- a/sepolicy/netmgrd.te
+++ b/sepolicy/netmgrd.te
@@ -1,6 +1,6 @@
# Network utilities (radio process)
type netmgrd, domain, device_domain_deprecated;
-type netmgrd_exec, exec_type, file_type;
+type netmgrd_exec, exec_type, vendor_file_type, file_type;
# Started by init
init_daemon_domain(netmgrd)
diff --git a/sepolicy/oem_qmi_server.te b/sepolicy/oem_qmi_server.te
index f5ef8c9..f3f3d7f 100644
--- a/sepolicy/oem_qmi_server.te
+++ b/sepolicy/oem_qmi_server.te
@@ -1,5 +1,5 @@
type oem_qmi_server, domain, device_domain_deprecated, mlstrustedsubject;
-type oem_qmi_server_exec, exec_type, file_type;
+type oem_qmi_server_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(oem_qmi_server)
diff --git a/sepolicy/perfd.te b/sepolicy/perfd.te
index 09cf9f3..b5044e1 100644
--- a/sepolicy/perfd.te
+++ b/sepolicy/perfd.te
@@ -1,5 +1,5 @@
type perfd, domain, device_domain_deprecated;
-type perfd_exec, exec_type, file_type;
+type perfd_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(perfd)
diff --git a/sepolicy/peripheral_manager.te b/sepolicy/peripheral_manager.te
index 05bc266..dbe59ae 100644
--- a/sepolicy/peripheral_manager.te
+++ b/sepolicy/peripheral_manager.te
@@ -1,5 +1,5 @@
type per_mgr, domain, device_domain_deprecated;
-type per_mgr_exec, exec_type, file_type;
+type per_mgr_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(per_mgr);
allow per_mgr shared_log_device:chr_file rw_file_perms;
diff --git a/sepolicy/peripheral_proxy.te b/sepolicy/peripheral_proxy.te
index 547ba5c..0a9f8b7 100644
--- a/sepolicy/peripheral_proxy.te
+++ b/sepolicy/peripheral_proxy.te
@@ -1,5 +1,5 @@
type per_proxy, domain, device_domain_deprecated;
-type per_proxy_exec, exec_type, file_type;
+type per_proxy_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(per_proxy);
binder_use(per_proxy)
diff --git a/sepolicy/qmux.te b/sepolicy/qmux.te
index 8b8de37..d65d1da 100644
--- a/sepolicy/qmux.te
+++ b/sepolicy/qmux.te
@@ -1,6 +1,6 @@
# Qualcomm Management Interface Multiplexer
type qmux, domain, device_domain_deprecated;
-type qmux_exec, exec_type, file_type;
+type qmux_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(qmux)
diff --git a/sepolicy/qti.te b/sepolicy/qti.te
index 39f80a0..0cc7c31 100644
--- a/sepolicy/qti.te
+++ b/sepolicy/qti.te
@@ -1,5 +1,5 @@
type qti, domain, device_domain_deprecated;
-type qti_exec, exec_type, file_type;
+type qti_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(qti)
diff --git a/sepolicy/rmt.te b/sepolicy/rmt.te
index e57e1ac..fd1594a 100644
--- a/sepolicy/rmt.te
+++ b/sepolicy/rmt.te
@@ -1,6 +1,6 @@
# remote storage process
type rmt, domain, device_domain_deprecated;
-type rmt_exec, exec_type, file_type;
+type rmt_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(rmt)
diff --git a/sepolicy/sensortool.te b/sepolicy/sensortool.te
index ce13dd0..14a4845 100644
--- a/sepolicy/sensortool.te
+++ b/sepolicy/sensortool.te
@@ -1,5 +1,5 @@
type sensortool, domain, device_domain_deprecated;
-type sensortool_exec, exec_type, file_type;
+type sensortool_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(sensortool)
diff --git a/sepolicy/thermald.te b/sepolicy/thermald.te
index df974cc..48fc2d0 100644
--- a/sepolicy/thermald.te
+++ b/sepolicy/thermald.te
@@ -1,5 +1,5 @@
type thermald, domain, device_domain_deprecated;
-type thermald_exec, exec_type, file_type;
+type thermald_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(thermald)
diff --git a/sepolicy/time.te b/sepolicy/time.te
index e1048d9..82db267 100644
--- a/sepolicy/time.te
+++ b/sepolicy/time.te
@@ -1,5 +1,5 @@
type time, domain, device_domain_deprecated;
-type time_exec, exec_type, file_type;
+type time_exec, exec_type, vendor_file_type, file_type;
# Started by init
init_daemon_domain(time)