From d2625d17e9bc3597a5b3d9d7a1adc5f07a3c0a3a Mon Sep 17 00:00:00 2001 From: Simon Shields Date: Tue, 9 Feb 2016 12:22:50 +1100 Subject: smdk4412-common: add macloader and tinyplay sepolicy [1/2] Change-Id: I1dcc6f97ba7f6d95ed92770d5f38d03b4e3b3d57 --- selinux/file_contexts | 2 ++ selinux/macloader.te | 11 +++++++++++ selinux/tinyplay.te | 8 ++++++++ 3 files changed, 21 insertions(+) create mode 100644 selinux/file_contexts create mode 100644 selinux/macloader.te create mode 100644 selinux/tinyplay.te (limited to 'selinux') diff --git a/selinux/file_contexts b/selinux/file_contexts new file mode 100644 index 0000000..30f284f --- /dev/null +++ b/selinux/file_contexts @@ -0,0 +1,2 @@ +/system/bin/macloader u:object_r:macloader_exec:s0 +/system/bin/tinyplay u:object_r:tinyplay_exec:s0 diff --git a/selinux/macloader.te b/selinux/macloader.te new file mode 100644 index 0000000..a3eb4a2 --- /dev/null +++ b/selinux/macloader.te @@ -0,0 +1,11 @@ +type macloader, domain; +type macloader_exec, exec_type, file_type; +init_daemon_domain(macloader); + +allow macloader efs_file:dir search; +allow macloader efs_device_file:dir search; +allow macloader wifi_data_file:file { read getattr open write setattr }; +allow macloader self:capability { dac_override chown fowner fsetid }; +allow macloader system_data_file:dir w_dir_perms; + +domain_trans(init, rootfs, macloader) diff --git a/selinux/tinyplay.te b/selinux/tinyplay.te new file mode 100644 index 0000000..49a5f37 --- /dev/null +++ b/selinux/tinyplay.te @@ -0,0 +1,8 @@ +type tinyplay, domain; +type tinyplay_exec, exec_type, file_type; +init_daemon_domain(tinyplay) + +allow tinyplay audio_device:chr_file { open read write ioctl }; +allow tinyplay audio_device:dir search; + +domain_trans(init, rootfs, tinyplay) -- cgit v1.1