diff options
| author | Daniel Hillenbrand <codeworkx@cyanogenmod.org> | 2013-08-11 18:07:10 +0200 |
|---|---|---|
| committer | Daniel Hillenbrand <codeworkx@cyanogenmod.org> | 2013-08-11 18:07:10 +0200 |
| commit | 605a7bbb337434c21a666334ed9e166165503a0c (patch) | |
| tree | 367efa44a625aabeba2e13df9c8754de1cfac18d | |
| parent | faf47a6d5ddd205c83ce4ed6a3515551953e3277 (diff) | |
| download | device_samsung_espressowifi-605a7bbb337434c21a666334ed9e166165503a0c.zip device_samsung_espressowifi-605a7bbb337434c21a666334ed9e166165503a0c.tar.gz device_samsung_espressowifi-605a7bbb337434c21a666334ed9e166165503a0c.tar.bz2 | |
p31xx: refine sepolicies
Change-Id: I1713e9e12a4ff3d6d760e315a2031908fe4dcd8f
| -rwxr-xr-x | rootdir/init.espresso.rc | 15 | ||||
| -rw-r--r-- | selinux/file_contexts | 5 | ||||
| -rw-r--r-- | selinux/pvrsrvinit.te | 1 | ||||
| -rw-r--r-- | selinux/rild.te | 5 |
4 files changed, 17 insertions, 9 deletions
diff --git a/rootdir/init.espresso.rc b/rootdir/init.espresso.rc index fd0ce8d..9c8b7d5 100755 --- a/rootdir/init.espresso.rc +++ b/rootdir/init.espresso.rc @@ -49,6 +49,21 @@ on fs mount debugfs /sys/kernel/debug /sys/kernel/debug +# Restorecon + restorecon /efs/nv_data.bin + restorecon /efs/nv_data.bin.md5 + restorecon /efs/.nv_core.bak + restorecon /efs/.nv_core.bak.md5 + restorecon /efs/.nv_data.bak + restorecon /efs/.nv_data.bak.md5 + restorecon /efs/.nv_state + restorecon /efs/bluetooth/bt_addr + restorecon /efs/FactoryApp/factorymode + restorecon /efs/FactoryApp/hw_ver + restorecon /efs/FactoryApp/keystr + restorecon /efs/FactoryApp/serial_no + restorecon /efs/imei/mps_code.dat + # pvr module insmod /system/lib/modules/pvrsrvkm_sgx540_120.ko diff --git a/selinux/file_contexts b/selinux/file_contexts index 027c2de..a64887a 100644 --- a/selinux/file_contexts +++ b/selinux/file_contexts @@ -11,11 +11,6 @@ /dev/block/mmcblk0p8 u:object_r:efs_block_device:s0 -/efs/imei/mps_code.dat u:object_r:radio_data_file:s0 -/efs/nv_data.bin u:object_r:radio_data_file:s0 -/efs/nv_data.bin.md5 u:object_r:radio_data_file:s0 -/efs/upgaddr u:object_r:efs_file:s0 - # Bluetooth /dev/ttyO1 u:object_r:hci_attach_dev:s0 /efs/bluetooth/(/.*)? u:object_r:bluetooth_efs_file:s0 diff --git a/selinux/pvrsrvinit.te b/selinux/pvrsrvinit.te index 1ef06ff..d35bac9 100644 --- a/selinux/pvrsrvinit.te +++ b/selinux/pvrsrvinit.te @@ -10,3 +10,4 @@ allow pvrsrvinit system_file:file x_file_perms; allow pvrsrvinit shell_exec:file rx_file_perms; allow pvrsrvinit pvrsrvinit_exec:file rx_file_perms; allow pvrsrvinit property_socket:sock_file write; +allow pvrsrvinit init:unix_stream_socket connectto; diff --git a/selinux/rild.te b/selinux/rild.te index 5711ef0..40406e3 100644 --- a/selinux/rild.te +++ b/selinux/rild.te @@ -3,8 +3,5 @@ allow rild self:netlink_route_socket { write }; allow rild self:netlink_kobject_uevent_socket { create bind read write }; allow rild radio_device:chr_file rw_file_perms; - allow rild efs_block_device:blk_file rw_file_perms; - -allow rild radio_data_file:file { read open write setattr }; -allow rild efs_file:file { read open write getattr }; +allow rild efs_file:file { read open write setattr }; |