diff options
| author | Daniel Hillenbrand <codeworkx@cyanogenmod.org> | 2013-08-11 18:05:38 +0200 |
|---|---|---|
| committer | Daniel Hillenbrand <codeworkx@cyanogenmod.org> | 2013-08-11 18:05:38 +0200 |
| commit | 2bcc02a461d87b50abca12bac8e400c3da4fa033 (patch) | |
| tree | b6a27f20eddc264767ae914eb9e81d4129464228 | |
| parent | 8d4807089d438f4b7dd9cc08716d0e10b2a032df (diff) | |
| download | device_samsung_espresso3g-2bcc02a461d87b50abca12bac8e400c3da4fa033.zip device_samsung_espresso3g-2bcc02a461d87b50abca12bac8e400c3da4fa033.tar.gz device_samsung_espresso3g-2bcc02a461d87b50abca12bac8e400c3da4fa033.tar.bz2 | |
p51xx: refine sepolicies
Change-Id: I5e321acb556fa13a8d90c0ea7460272b841037f5
| -rwxr-xr-x | rootdir/init.espresso10.rc | 15 | ||||
| -rw-r--r-- | selinux/file_contexts | 5 | ||||
| -rw-r--r-- | selinux/pvrsrvinit.te | 1 | ||||
| -rw-r--r-- | selinux/rild.te | 5 |
4 files changed, 17 insertions, 9 deletions
diff --git a/rootdir/init.espresso10.rc b/rootdir/init.espresso10.rc index 0c1b0ce..900ec72 100755 --- a/rootdir/init.espresso10.rc +++ b/rootdir/init.espresso10.rc @@ -49,6 +49,21 @@ on fs mount debugfs /sys/kernel/debug /sys/kernel/debug +# Restorecon + restorecon /efs/nv_data.bin + restorecon /efs/nv_data.bin.md5 + restorecon /efs/.nv_core.bak + restorecon /efs/.nv_core.bak.md5 + restorecon /efs/.nv_data.bak + restorecon /efs/.nv_data.bak.md5 + restorecon /efs/.nv_state + restorecon /efs/bluetooth/bt_addr + restorecon /efs/FactoryApp/factorymode + restorecon /efs/FactoryApp/hw_ver + restorecon /efs/FactoryApp/keystr + restorecon /efs/FactoryApp/serial_no + restorecon /efs/imei/mps_code.dat + # pvr module insmod /system/lib/modules/pvrsrvkm_sgx540_120.ko diff --git a/selinux/file_contexts b/selinux/file_contexts index 027c2de..a64887a 100644 --- a/selinux/file_contexts +++ b/selinux/file_contexts @@ -11,11 +11,6 @@ /dev/block/mmcblk0p8 u:object_r:efs_block_device:s0 -/efs/imei/mps_code.dat u:object_r:radio_data_file:s0 -/efs/nv_data.bin u:object_r:radio_data_file:s0 -/efs/nv_data.bin.md5 u:object_r:radio_data_file:s0 -/efs/upgaddr u:object_r:efs_file:s0 - # Bluetooth /dev/ttyO1 u:object_r:hci_attach_dev:s0 /efs/bluetooth/(/.*)? u:object_r:bluetooth_efs_file:s0 diff --git a/selinux/pvrsrvinit.te b/selinux/pvrsrvinit.te index 1ef06ff..d35bac9 100644 --- a/selinux/pvrsrvinit.te +++ b/selinux/pvrsrvinit.te @@ -10,3 +10,4 @@ allow pvrsrvinit system_file:file x_file_perms; allow pvrsrvinit shell_exec:file rx_file_perms; allow pvrsrvinit pvrsrvinit_exec:file rx_file_perms; allow pvrsrvinit property_socket:sock_file write; +allow pvrsrvinit init:unix_stream_socket connectto; diff --git a/selinux/rild.te b/selinux/rild.te index 5711ef0..40406e3 100644 --- a/selinux/rild.te +++ b/selinux/rild.te @@ -3,8 +3,5 @@ allow rild self:netlink_route_socket { write }; allow rild self:netlink_kobject_uevent_socket { create bind read write }; allow rild radio_device:chr_file rw_file_perms; - allow rild efs_block_device:blk_file rw_file_perms; - -allow rild radio_data_file:file { read open write setattr }; -allow rild efs_file:file { read open write getattr }; +allow rild efs_file:file { read open write setattr }; |