summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorCristian Iorga <cristian.iorga@intel.com>2016-04-05 17:27:03 +0300
committerCristian Iorga <cristian.iorga@intel.com>2016-04-15 14:56:44 +0300
commitedd94bf063dd07b6eb13bab0e962e74d1498019c (patch)
tree79efcc95dd52e997c005eb89cd84f9a420c36665
parentde28dfa547d1df64b0d5adbd32d48dd3986a971d (diff)
downloadedison-edd94bf063dd07b6eb13bab0e962e74d1498019c.tar.gz
Add SELinux rules for bcm43340 firmware files
For bcm43340 peripheral FW is loaded via apmanager, bluetoothtbd, shill and wifi_setup, so allow open and read file operations. BUG=28014601 Change-Id: Iacba6e8abd6e4880bebfdc12d7089d3323a65d72 Signed-off-by: Cristian Iorga <cristian.iorga@intel.com>
-rw-r--r--sepolicy/apmanager.te1
-rw-r--r--sepolicy/bluetoothtbd.te1
-rw-r--r--sepolicy/file.te1
-rw-r--r--sepolicy/file_contexts1
-rw-r--r--sepolicy/shill.te1
-rw-r--r--sepolicy/wifi_setup.te1
-rw-r--r--sepolicy/wpa.te1
7 files changed, 7 insertions, 0 deletions
diff --git a/sepolicy/apmanager.te b/sepolicy/apmanager.te
new file mode 100644
index 0000000..880d5dc
--- /dev/null
+++ b/sepolicy/apmanager.te
@@ -0,0 +1 @@
+r_dir_file(apmanager, bcm_firmware_file)
diff --git a/sepolicy/bluetoothtbd.te b/sepolicy/bluetoothtbd.te
new file mode 100644
index 0000000..4270503
--- /dev/null
+++ b/sepolicy/bluetoothtbd.te
@@ -0,0 +1 @@
+r_dir_file(bluetoothtbd, bcm_firmware_file)
diff --git a/sepolicy/file.te b/sepolicy/file.te
new file mode 100644
index 0000000..3dfbda0
--- /dev/null
+++ b/sepolicy/file.te
@@ -0,0 +1 @@
+type bcm_firmware_file, file_type;
diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts
index 1a73875..55b7fbc 100644
--- a/sepolicy/file_contexts
+++ b/sepolicy/file_contexts
@@ -3,3 +3,4 @@
/dev/block/pci/pci0000:00/0000:00:01.0/by-name/system_a u:object_r:system_block_device:s0
/dev/block/pci/pci0000:00/0000:00:01.0/by-name/boot_b u:object_r:boot_block_device:s0
/dev/block/pci/pci0000:00/0000:00:01.0/by-name/system_b u:object_r:system_block_device:s0
+/system/vendor/firmware/bcm43340(/.*)? u:object_r:bcm_firmware_file:s0
diff --git a/sepolicy/shill.te b/sepolicy/shill.te
new file mode 100644
index 0000000..eddc59d
--- /dev/null
+++ b/sepolicy/shill.te
@@ -0,0 +1 @@
+r_dir_file(shill, bcm_firmware_file)
diff --git a/sepolicy/wifi_setup.te b/sepolicy/wifi_setup.te
new file mode 100644
index 0000000..e6f1748
--- /dev/null
+++ b/sepolicy/wifi_setup.te
@@ -0,0 +1 @@
+r_dir_file(wifi_setup, bcm_firmware_file)
diff --git a/sepolicy/wpa.te b/sepolicy/wpa.te
new file mode 100644
index 0000000..2136608
--- /dev/null
+++ b/sepolicy/wpa.te
@@ -0,0 +1 @@
+r_dir_file(wpa, bcm_firmware_file)