donjohanliebert/device_motorola_sm7325-common
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sm7325-common: Address dubai's vibrator denials

Browse Source 
Example:
I auditd  : type=1400 audit(0.0:18): avc: denied { open } for comm="vendor.qti.hard" path="/sys/devices/platform/soc/990000.i2c/i2c-1/1-005a/leds/vibrator/activate" dev="sysfs" ino=93558 scontext=u:r:hal_vibrator_default:s0 tcontext=u:object_r:sysfs:s0 tclass=file

Change-Id: Iea46e718f4e2c1ed3b3037dcfecb4536fd47ef2d
This commit is contained in:
Marc Bourgoin 2022-08-27 06:53:41 -06:00
parent c84960faef
commit 27a8c002ce
4 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
sepolicy/vendor/file.te vendored
View File

@ -31,3 +31,6 @@ type vendor_sysfs_touchpanel, fs_type, sysfs_type;
# V4L2 Name # V4L2 Name
type vendor_sysfs_v4l2_name, fs_type, sysfs_type; type vendor_sysfs_v4l2_name, fs_type, sysfs_type;
# Vibrator
type vendor_sysfs_vibrator, fs_type, sysfs_type;

3
sepolicy/vendor/file_contexts vendored
View File

@ -84,6 +84,9 @@
/sys/devices/platform/soc/soc:qcom,cam-sync/video4linux/video([0-9])+/name u:object_r:vendor_sysfs_v4l2_name:s0 /sys/devices/platform/soc/soc:qcom,cam-sync/video4linux/video([0-9])+/name u:object_r:vendor_sysfs_v4l2_name:s0
/sys/devices/platform/soc/soc:qcom,cam-req-mgr/video4linux/video([0-9])+/name u:object_r:vendor_sysfs_v4l2_name:s0 /sys/devices/platform/soc/soc:qcom,cam-req-mgr/video4linux/video([0-9])+/name u:object_r:vendor_sysfs_v4l2_name:s0
# Vibrator
/sys/devices/platform/soc/990000.i2c/i2c-1/1-005a/leds/vibrator(/.*)? u:object_r:vendor_sysfs_vibrator:s0
# Wakeups # Wakeups
/sys/devices/virtual/input/input[0-9]+/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0 /sys/devices/virtual/input/input[0-9]+/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0
/sys/devices/platform/soc/[^*]+/wakeup/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0 /sys/devices/platform/soc/[^*]+/wakeup/wakeup[0-9]+(/.*)? u:object_r:sysfs_wakeup:s0

2
sepolicy/vendor/hal_vibrator_default.te vendored Normal file
View File

@ -0,0 +1,2 @@
allow hal_vibrator_default vendor_sysfs_vibrator:dir r_dir_perms;
allow hal_vibrator_default vendor_sysfs_vibrator:file rw_file_perms;

2
sepolicy/vendor/init.te vendored
View File

@ -21,3 +21,5 @@ recovery_only(`
allow init self:capability sys_module; allow init self:capability sys_module;
allow init rootfs:system module_load; allow init rootfs:system module_load;
') ')
allow init vendor_sysfs_vibrator:file create_file_perms;