aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRGIB <gibellini.roberto@gmail.com>2016-12-23 23:09:42 +0100
committerRGIB <gibellini.roberto@gmail.com>2016-12-23 23:09:42 +0100
commit7f7ed272b1322a3a69e28c54e10fcec14702f906 (patch)
tree8655a7e5af08aa2dd6d006da1e5ca0d885b20527
parent3ce2d992851c341032ec120e5a1974e60352b97f (diff)
downloaddevice_samsung_kona-common-7f7ed272b1322a3a69e28c54e10fcec14702f906.zip
device_samsung_kona-common-7f7ed272b1322a3a69e28c54e10fcec14702f906.tar.gz
device_samsung_kona-common-7f7ed272b1322a3a69e28c54e10fcec14702f906.tar.bz2
kona : selinux update
Change-Id: I8b659c61ea76408c39eb52799629355e9a76ebab
-rw-r--r--selinux/file_contexts2
-rw-r--r--selinux/geomagneticd.te1
-rw-r--r--selinux/macloader.te5
3 files changed, 4 insertions, 4 deletions
diff --git a/selinux/file_contexts b/selinux/file_contexts
index 1b6cf04..f474954 100644
--- a/selinux/file_contexts
+++ b/selinux/file_contexts
@@ -19,8 +19,6 @@
/data/misc/radio(/.*)? u:object_r:radio_data_file:s0
/data/.socket_stream u:object_r:radio_data_file:s0
/data/cfw(/.*)? u:object_r:camera_data_file:s0
-/data/.cid.info u:object_r:wifi_data_file:s0
-/efs/wifi/.mac.info u:object_r:wifi_data_file:s0
/dev/s3c-mfc u:object_r:graphics_device:s0
/dev/__cbd_msg_ u:object_r:radio_device:s0
diff --git a/selinux/geomagneticd.te b/selinux/geomagneticd.te
index 755c68e..ddcfec5 100644
--- a/selinux/geomagneticd.te
+++ b/selinux/geomagneticd.te
@@ -2,6 +2,7 @@ type geomagneticd, domain;
type geomagneticd_exec, exec_type, file_type;
init_daemon_domain(geomagneticd)
domain_trans(init, rootfs, geomagneticd)
+file_type_auto_trans(geomagneticd, system_data_file, gps_data_file)
allow geomagneticd gps_data_file:file write;
allow geomagneticd input_device:chr_file { read ioctl open };
diff --git a/selinux/macloader.te b/selinux/macloader.te
index bd26206..da70890 100644
--- a/selinux/macloader.te
+++ b/selinux/macloader.te
@@ -1,4 +1,5 @@
+file_type_auto_trans(macloader, system_data_file, wifi_data_file)
+
allow macloader efs_file:file { read open getattr };
allow macloader efs_file:dir search;
-allow macloader wifi_data_file:file write;
-allow macloader wifi_data_file:file unlink;
+allow macloader wifi_data_file:file { unlink write open setattr };