From d8aa9926b4bfebaec8216ac3d60b74ef8121ac71 Mon Sep 17 00:00:00 2001 From: Ram Chandrasekar Date: Fri, 28 Jul 2023 16:10:34 -0700 Subject: RELAND: pixel: sepolicy: Remove thermal HAL sepolicy Thermal HAL policies are moved to gs-common folder. Remove them from this location. Reland this change since all the reference from EoL chipsets have been removed. Bug: 289146743 Test: Compilation and boot-up test. Ignore-AOSP-First: Removing this content from this repo. Change-Id: I3162f8e0c3096b271999fbb0c08914220f98f28e Signed-off-by: Ram Chandrasekar --- thermal/file.te | 2 -- thermal/file_contexts | 6 ------ thermal/genfs_contexts | 3 --- thermal/hal_thermal_default.te | 16 ---------------- thermal/init-thermal-logging.sh.te | 10 ---------- thermal/init-thermal-symlinks.sh.te | 12 ------------ thermal/pixel-thermal-control.sh.te | 13 ------------- thermal/property.te | 2 -- thermal/property_contexts | 1 - thermal/vendor_init.te | 3 --- 10 files changed, 68 deletions(-) delete mode 100644 thermal/file.te delete mode 100644 thermal/file_contexts delete mode 100644 thermal/genfs_contexts delete mode 100644 thermal/hal_thermal_default.te delete mode 100644 thermal/init-thermal-logging.sh.te delete mode 100644 thermal/init-thermal-symlinks.sh.te delete mode 100644 thermal/pixel-thermal-control.sh.te delete mode 100644 thermal/property.te delete mode 100644 thermal/property_contexts delete mode 100644 thermal/vendor_init.te diff --git a/thermal/file.te b/thermal/file.te deleted file mode 100644 index a2b1ab8..0000000 --- a/thermal/file.te +++ /dev/null @@ -1,2 +0,0 @@ -type thermal_link_device, dev_type; -type debugfs_thermal, debugfs_type, fs_type; diff --git a/thermal/file_contexts b/thermal/file_contexts deleted file mode 100644 index c3fb04f..0000000 --- a/thermal/file_contexts +++ /dev/null @@ -1,6 +0,0 @@ -/vendor/bin/hw/android\.hardware\.thermal@2\.0-service\.pixel u:object_r:hal_thermal_default_exec:s0 -/vendor/bin/hw/android\.hardware\.thermal-service\.pixel u:object_r:hal_thermal_default_exec:s0 -/vendor/bin/thermal_logd u:object_r:init-thermal-logging-sh_exec:s0 -/vendor/bin/thermal_controld u:object_r:pixel-thermal-control-sh_exec:s0 -/vendor/bin/thermal_symlinks u:object_r:init-thermal-symlinks-sh_exec:s0 -/dev/thermal(/.*)? u:object_r:thermal_link_device:s0 diff --git a/thermal/genfs_contexts b/thermal/genfs_contexts deleted file mode 100644 index 3000fa0..0000000 --- a/thermal/genfs_contexts +++ /dev/null @@ -1,3 +0,0 @@ -genfscon sysfs /devices/virtual/thermal u:object_r:sysfs_thermal:s0 -genfscon sysfs /class/thermal u:object_r:sysfs_thermal:s0 -genfscon debugfs /gs101-thermal u:object_r:debugfs_thermal:s0 diff --git a/thermal/hal_thermal_default.te b/thermal/hal_thermal_default.te deleted file mode 100644 index 45ccf3a..0000000 --- a/thermal/hal_thermal_default.te +++ /dev/null @@ -1,16 +0,0 @@ -allow hal_thermal_default sysfs_thermal:dir r_dir_perms; -allow hal_thermal_default sysfs_thermal:file rw_file_perms; -allow hal_thermal_default sysfs_thermal:lnk_file r_file_perms; -allow hal_thermal_default thermal_link_device:dir r_dir_perms; -allow hal_thermal_default proc_stat:file r_file_perms; -allow hal_thermal_default self:netlink_generic_socket create_socket_perms_no_ioctl; -allow hal_thermal_default self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl; - -hal_client_domain(hal_thermal_default, hal_power); - -# read thermal_config -get_prop(hal_thermal_default, vendor_thermal_prop) - -# Needed for reporting thermal stats event -allow hal_thermal_default fwk_stats_service:service_manager find; -binder_call(hal_thermal_default, servicemanager) diff --git a/thermal/init-thermal-logging.sh.te b/thermal/init-thermal-logging.sh.te deleted file mode 100644 index 3da540e..0000000 --- a/thermal/init-thermal-logging.sh.te +++ /dev/null @@ -1,10 +0,0 @@ -type init-thermal-logging-sh, domain; -type init-thermal-logging-sh_exec, exec_type, vendor_file_type, file_type; - -init_daemon_domain(init-thermal-logging-sh) - -userdebug_or_eng(` - allow init-thermal-logging-sh vendor_toolbox_exec:file rx_file_perms; - allow init-thermal-logging-sh sysfs_thermal:dir r_dir_perms; - allow init-thermal-logging-sh sysfs_thermal:file r_file_perms; -') diff --git a/thermal/init-thermal-symlinks.sh.te b/thermal/init-thermal-symlinks.sh.te deleted file mode 100644 index 093512c..0000000 --- a/thermal/init-thermal-symlinks.sh.te +++ /dev/null @@ -1,12 +0,0 @@ -type init-thermal-symlinks-sh, domain; -type init-thermal-symlinks-sh_exec, exec_type, vendor_file_type, file_type; - -init_daemon_domain(init-thermal-symlinks-sh) - -allow init-thermal-symlinks-sh vendor_toolbox_exec:file rx_file_perms; -allow init-thermal-symlinks-sh thermal_link_device:dir rw_dir_perms; -allow init-thermal-symlinks-sh thermal_link_device:lnk_file create_file_perms; -allow init-thermal-symlinks-sh sysfs_thermal:dir r_dir_perms; -allow init-thermal-symlinks-sh sysfs_thermal:file r_file_perms; -allow init-thermal-symlinks-sh sysfs_thermal:lnk_file r_file_perms; -set_prop(init-thermal-symlinks-sh, vendor_thermal_prop) diff --git a/thermal/pixel-thermal-control.sh.te b/thermal/pixel-thermal-control.sh.te deleted file mode 100644 index a6430f1..0000000 --- a/thermal/pixel-thermal-control.sh.te +++ /dev/null @@ -1,13 +0,0 @@ -type pixel-thermal-control-sh, domain; -type pixel-thermal-control-sh_exec, exec_type, vendor_file_type, file_type; - -init_daemon_domain(pixel-thermal-control-sh) - -userdebug_or_eng(` - allow pixel-thermal-control-sh vendor_toolbox_exec:file execute_no_trans; - allow pixel-thermal-control-sh sysfs_thermal:dir r_dir_perms; - allow pixel-thermal-control-sh sysfs_thermal:file rw_file_perms; - allow pixel-thermal-control-sh sysfs_thermal:lnk_file r_file_perms; - allow pixel-thermal-control-sh thermal_link_device:dir r_dir_perms; - get_prop(pixel-thermal-control-sh, vendor_thermal_prop) -') diff --git a/thermal/property.te b/thermal/property.te deleted file mode 100644 index 676c85a..0000000 --- a/thermal/property.te +++ /dev/null @@ -1,2 +0,0 @@ -#thermal HAL -vendor_internal_prop(vendor_thermal_prop) diff --git a/thermal/property_contexts b/thermal/property_contexts deleted file mode 100644 index 65a02ee..0000000 --- a/thermal/property_contexts +++ /dev/null @@ -1 +0,0 @@ -vendor.thermal. u:object_r:vendor_thermal_prop:s0 diff --git a/thermal/vendor_init.te b/thermal/vendor_init.te deleted file mode 100644 index aaf6ac1..0000000 --- a/thermal/vendor_init.te +++ /dev/null @@ -1,3 +0,0 @@ -allow vendor_init thermal_link_device:dir r_dir_perms; -allow vendor_init thermal_link_device:lnk_file r_file_perms; -set_prop(vendor_init, vendor_thermal_prop) -- cgit v1.2.3