From d97054248cdc23aa66b6ede6f2526829849174c0 Mon Sep 17 00:00:00 2001 From: sbrissen Date: Mon, 14 Apr 2014 07:39:58 -0400 Subject: Kona: fix duplicate SE linux policy Change-Id: I3a6334f2fc4fe322a74dfeb9902d53b15e7a71c4 --- selinux/file.te | 1 - selinux/file_contexts | 17 +++++++++-------- selinux/system.te | 1 - 3 files changed, 9 insertions(+), 10 deletions(-) (limited to 'selinux') diff --git a/selinux/file.te b/selinux/file.te index 3f045f6..185b1c2 100644 --- a/selinux/file.te +++ b/selinux/file.te @@ -4,7 +4,6 @@ type firmware_mfc, file_type; type firmware_camera, file_type; type qmuxd_socket, file_type; -type camera_data_file, file_type, data_file_type; type kickstart_data_file, file_type, data_file_type; type sensors_data_file, file_type, data_file_type; type volume_data_file, file_type, data_file_type; diff --git a/selinux/file_contexts b/selinux/file_contexts index db34e45..e0dc817 100644 --- a/selinux/file_contexts +++ b/selinux/file_contexts @@ -14,7 +14,7 @@ # Bluetooth /dev/ttySAC0 u:object_r:hci_attach_dev:s0 -/efs/bluetooth(/.*)? u:object_r:bluetooth_data_file:s0 +/efs/bluetooth(/.*)? u:object_r:bluetooth_data_file:s0 # Sensors /dev/akm8963 u:object_r:sensors_device:s0 @@ -24,30 +24,31 @@ /data/ISP_CV u:object_r:camera_data_file:s0 /dev/exynos-mem u:object_r:video_device:s0 -# for wpa_supp +# For wpa_supp /dev/rfkill u:object_r:rfkill_device:s0 # Firmwares /system/vendor/firmware(/.*)? u:object_r:firmware_camera:s0 /system/vendor/firmware/mfc_fw.bin u:object_r:firmware_mfc:s0 /data/cfw(/.*)? u:object_r:firmware_camera:s0 +/tombstones u:object_r:system_data_file:s0 +/tombstones(/.*)? u:object_r:tombstone_data_file:s0 /tombstones/qcks(/.*)? u:object_r:kickstart_data_file:s0 -/tombstones(/.*)? u:object_r:tombstone_data_file:s0 # Vibrator /dev/tspdrv u:object_r:input_device:s0 -#Wifi +# Wifi /efs/wifi/.mac.info u:object_r:wifi_data_file:s0 -#Sec-ril +# Sec-ril /efs/FactoryApp/keystr u:object_r:efs_file:s0 /efs/FactoryApp/factorymode u:object_r:efs_file:s0 /efs/FactoryApp/serial_no u:object_r:efs_file:s0 /data/misc/radio/ramdumpmode.txt u:object_r:radio_data_file:s0 /data/misc/radio/dlnk u:object_r:radio_data_file:s0 -#Binaries +# Binaries /system/bin/qmuxd u:object_r:qmux_exec:s0 /system/bin/netmgrd u:object_r:netmgrd_exec:s0 /system/bin/efsks u:object_r:kickstart_exec:s0 @@ -63,8 +64,8 @@ # Block devices /dev/block/mmcblk0p[3-6]* u:object_r:efs_block_device:s0 -/dev/block/mmcblk0p10 u:object_r:efs_block_device:s0 -/dev/block/mmcblk0p11 u:object_r:efs_block_device:s0 +/dev/block/mmcblk0p13 u:object_r:efs_block_device:s0 +/dev/block/mmcblk0p14 u:object_r:efs_block_device:s0 # Audio related /data/local/audio(/.*)? u:object_r:volume_data_file:s0 diff --git a/selinux/system.te b/selinux/system.te index 3f9fc14..03637ab 100755 --- a/selinux/system.te +++ b/selinux/system.te @@ -2,7 +2,6 @@ qmux_socket(system) allow system diagnostic_device:chr_file rw_file_perms; -#allow system uinput_device:chr_file { read ioctl write open }; allow system sensors_device:chr_file { read open }; allow system sensors_data_file:file r_file_perms; allow system wpa_socket:unix_dgram_socket sendto; -- cgit v1.1