mirror of
https://github.com/LineageOS/android_device_xiaomi_whyred.git
synced 2025-10-03 01:39:16 +02:00
whyred: Add sepolicy for goodix script
Change-Id: Ic8b7dba6a5660c17f5db1c743e5d22f31ae1b1b3
This commit is contained in:
parent
ee4c461c84
commit
b691b2cb8a
3 changed files with 19 additions and 1 deletions
|
@ -1313,5 +1313,5 @@ service config_bt_addr /vendor/bin/btnvtool -O
|
|||
|
||||
service goodix_script /vendor/bin/init.goodix.sh
|
||||
class late_start
|
||||
user root
|
||||
user system
|
||||
oneshot
|
||||
|
|
|
@ -27,6 +27,9 @@
|
|||
/sys/devices/soc/soc:fpc1020.*/hw_reset u:object_r:sysfs_fpc_dev:s0
|
||||
/sys/devices/soc/soc:fpc1020.*/wakeup_enable u:object_r:sysfs_fpc_dev:s0
|
||||
|
||||
# Shell Script
|
||||
/(vendor|system/vendor)/bin/init\.goodix\.sh u:object_r:init_fingerprint_exec:s0
|
||||
|
||||
# Video4linux sysfs nodes
|
||||
/sys/devices/soc/ca00000\.qcom,msm-cam/video4linux/video0(/.*)? u:object_r:sysfs_graphics:s0
|
||||
/sys/devices/soc/caa0000\.qcom,jpeg/video4linux/video1(/.*)? u:object_r:sysfs_graphics:s0
|
||||
|
|
15
sepolicy/init_fingerprint.te
Normal file
15
sepolicy/init_fingerprint.te
Normal file
|
@ -0,0 +1,15 @@
|
|||
type init_fingerprint, domain;
|
||||
type init_fingerprint_exec, exec_type, vendor_file_type, file_type;
|
||||
|
||||
# Allow for transition from init domain to init_fingerprint
|
||||
init_daemon_domain(init_fingerprint)
|
||||
|
||||
# Shell script needs to execute /vendor/bin/sh
|
||||
allow init_fingerprint vendor_shell_exec:file rx_file_perms;
|
||||
allow init_fingerprint vendor_toolbox_exec:file rx_file_perms;
|
||||
|
||||
# Allow to delete file
|
||||
allow init_fingerprint persist_file:dir search;
|
||||
allow init_fingerprint persist_drm_file:dir { read search open write remove_name };
|
||||
allow init_fingerprint persist_drm_file:file { getattr unlink };
|
||||
allow init_fingerprint system_data_file:file r_file_perms;
|
Loading…
Add table
Add a link
Reference in a new issue