From c8748021a6bf03524688940bb63df198a44702d7 Mon Sep 17 00:00:00 2001 From: SGCMarkus Date: Thu, 11 Aug 2022 18:30:15 +0200 Subject: [PATCH] sm7325-common: sepolicy: allow init.qti.media to read sku_version also label sku_version while we at it Change-Id: Id826748274b96957f88b5e1abe11337778b20a8f --- sepolicy/vendor/file.te | 3 +++ sepolicy/vendor/genfs_contexts | 3 +++ sepolicy/vendor/vendor_qti_media.te | 1 + 3 files changed, 7 insertions(+) create mode 100644 sepolicy/vendor/vendor_qti_media.te diff --git a/sepolicy/vendor/file.te b/sepolicy/vendor/file.te index cc8a4a2..16d2dee 100644 --- a/sepolicy/vendor/file.te +++ b/sepolicy/vendor/file.te @@ -23,5 +23,8 @@ type fsg_file, file_type, contextmount_type, vendor_file_type; type proc_sched_lib_mask_cpuinfo, proc_type, fs_type; type vendor_sysfs_dt2w, fs_type, sysfs_type; +# SKU version +type vendor_sysfs_sku_version, fs_type, sysfs_type; + # Touchscreen type vendor_sysfs_touchpanel, fs_type, sysfs_type; diff --git a/sepolicy/vendor/genfs_contexts b/sepolicy/vendor/genfs_contexts index cb00686..5bff401 100644 --- a/sepolicy/vendor/genfs_contexts +++ b/sepolicy/vendor/genfs_contexts @@ -30,6 +30,9 @@ genfscon sysfs /devices/platform/soc/c440000.qcom,spmi/spmi-0/spmi0-00/c440000.q genfscon sysfs /devices/platform/soc/ae00000.qcom,mdss_mdp/drm/card0/card0-DSI-1/panelName u:object_r:vendor_sysfs_data:s0 genfscon sysfs /devices/platform/soc/ae00000.qcom,mdss_mdp/drm/card0/card0-DSI-1/panelRegDA u:object_r:vendor_sysfs_data:s0 +# SKU version +genfscon sysfs /devices/platform/soc/aa00000.qcom,vidc/sku_version u:object_r:vendor_sysfs_sku_version:s0 + # Touchscreen genfscon sysfs /class/touchscreen u:object_r:vendor_sysfs_touchpanel:s0 genfscon sysfs /devices/virtual/touchscreen u:object_r:vendor_sysfs_touchpanel:s0 diff --git a/sepolicy/vendor/vendor_qti_media.te b/sepolicy/vendor/vendor_qti_media.te new file mode 100644 index 0000000..e49d540 --- /dev/null +++ b/sepolicy/vendor/vendor_qti_media.te @@ -0,0 +1 @@ +allow vendor_qti_media vendor_sysfs_sku_version:file r_file_perms;