Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Revert "Enable SELinux for ivi" #247

Open
wants to merge 1 commit into
base: celadon/s/mr0/master
Choose a base branch
from
Open

Revert "Enable SELinux for ivi" #247

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 0 additions & 3 deletions audio/hal_audiocontrol_default.te
View file
Open in desktop

This file was deleted.

1 change: 0 additions & 1 deletion car/file.te
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,2 +1 @@
type sysfs_early_evs, fs_type, sysfs_type;
type sysfs_video, sysfs_type, fs_type;
2 changes: 0 additions & 2 deletions car/file_contexts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,5 +3,3 @@

/vendor/bin/hw/android.hardware.broadcastradio@intel-service u:object_r:hal_broadcastradio_default_exec:s0
/vendor/bin/hw/[email protected] u:object_r:hal_audiocontrol_default_exec:s0

/dev/v4l-subdev.* u:object_r:video_device:s0
1 change: 0 additions & 1 deletion car/genfs_contexts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,4 +9,3 @@ genfscon sysfs /fs/ext4/loop5/lifetime_write_kbytes u:object_r:sysfs_fs_lifetime
genfscon sysfs /fs/ext4/sda8/lifetime_write_kbytes u:object_r:sysfs_fs_lifetime_write:s0
genfscon sysfs /fs/ext4/sda13/lifetime_write_kbytes u:object_r:sysfs_fs_lifetime_write:s0
genfscon sysfs /fs/ext4/sda18/lifetime_write_kbytes u:object_r:sysfs_fs_lifetime_write:s0
genfscon sysfs /class/video4linux u:object_r:sysfs_video:s0
1 change: 0 additions & 1 deletion car/hal_camera_default.te
View file
Open in desktop

This file was deleted.

14 changes: 0 additions & 14 deletions car/hal_evs_default.te
View file
Open in desktop

This file was deleted.

1 change: 1 addition & 0 deletions crashlogd/vendor_init.te
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,4 +13,5 @@ userdebug_or_eng(`
dontaudit vendor_init log_file:lnk_file create_file_perms;
dontaudit vendor_init cache_file:dir { relabelfrom relabelto };
# data_between_core_and_vendor_violators
dontaudit vendor_init system_data_file:dir create_dir_perms;
')
1 change: 0 additions & 1 deletion graphics/mesa/genfs_contexts
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,4 @@
genfscon proc /driver/i915rpm/i915_rpm_op u:object_r:proc_graphics:s0
genfscon proc /sys/dev/i915/perf_stream_paranoid u:object_r:proc_graphics:s0
genfscon sysfs /devices/pci0000:00/0000:00:02.0/ u:object_r:sysfs_app_readable:s0
genfscon sysfs /devices/pci0000:00/0000:00:01.0/ u:object_r:sysfs_app_readable:s0
genfscon sysfs /devices/pci0000:00/0000:00:03.0/ u:object_r:sysfs_app_readable:s0
1 change: 0 additions & 1 deletion graphics/mesa/platform_app.te
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,2 +1 @@
allow platform_app graphics_device:dir search;
allow platform_app proc_graphics:file r_file_perms;
1 change: 0 additions & 1 deletion graphics/mesa/system_app.te
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,2 +1 @@
allow system_app graphics_device:dir search;
allow system_app proc_graphics:file r_file_perms;
1 change: 0 additions & 1 deletion graphics/mesa/system_server.te
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,4 +3,3 @@ allow system_server platform_app:file { read write };
allow system_server priv_app:file { read write };
allow system_server gpu_device:dir r_dir_perms;
allow system_server sysfs_app_readable:file r_file_perms;
allow system_server proc_graphics:file r_file_perms;
1 change: 0 additions & 1 deletion light/hal_light_default.te
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,3 @@
# allow hal_light_default set brightness for light module
allow hal_light_default sysfs_backlight:file rw_file_perms;
allow hal_light_default sysfs_backlight_thermal:dir search;
allow hal_light_default sysfs_app_readable:file rw_file_perms;
1 change: 0 additions & 1 deletion thermal/thermal-daemon/genfs_contexts
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,3 @@
genfscon sysfs /devices/virtual/dmi/id/product_name u:object_r:sysfs_dmi_id:s0
genfscon sysfs /devices/virtual/dmi/id/product_uuid u:object_r:sysfs_dmi_id:s0
genfscon sysfs /class/backlight u:object_r:sysfs_backlight_thermal:s0
genfscon sysfs /class/thermal u:object_r:sysfs_thermal:s0
2 changes: 0 additions & 2 deletions thermal/thermal-daemon/hal_thermal_intel.te
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,8 +9,6 @@ vndbinder_use(hal_thermal_intel)
add_service(hal_thermal_intel, thermal_hal_service)

allow hal_thermal_intel sysfs_thermal_management:dir r_dir_perms;
allow hal_thermal_intel sysfs_thermal_management:file r_file_perms;
allow hal_thermal_intel sysfs_thermal:dir r_dir_perms;
allow hal_thermal_intel sysfs_thermal:file r_file_perms;
allow hal_thermal_intel proc_stat:file r_file_perms;
allow hal_thermal_intel serial_device:chr_file rw_file_perms;
Expand Down
1 change: 0 additions & 1 deletion thermal/thermal-daemon/thermal-daemon.te
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,6 @@ allow thermal-daemon sysfs_leds:file rw_file_perms;
allow thermal-daemon sysfs_backlight_thermal:dir r_dir_perms;
allow thermal-daemon sysfs_backlight_thermal:file rw_file_perms;
allow thermal-daemon sysfs_dmi_id:{ file lnk_file } rw_file_perms;
allow thermal-daemon sysfs_app_readable:file rw_file_perms;
allow thermal-daemon vendor_data_file:dir create_dir_perms;
allow thermal-daemon vendor_data_file:dir rw_dir_perms;
allow thermal-daemon thermal-daemon_run_dir:dir create_dir_perms;
Expand Down
1 change: 0 additions & 1 deletion vendor/file_contexts
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,3 @@
/vendor/bin/logwrapper u:object_r:logwrapper_exec:s0
/vendor/bin/hw/android\.hardware\.graphics\.allocator@4\.0-service\.minigbm u:object_r:hal_graphics_allocator_default_exec:s0
/vendor/lib(64)?/hw/android\.hardware\.graphics\.mapper@4\.0-impl\.minigbm\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/libippcustom\.so u:object_r:same_process_hal_file:s0
1 change: 0 additions & 1 deletion vendor/genfs_contexts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,5 @@ genfscon sysfs /devices/pnp0/00:00/rtc u:object_r:sysfs_rtc:s0
genfscon sysfs /devices/pnp0/00:03/rtc u:object_r:sysfs_rtc:s0
genfscon sysfs /devices/pnp0/00:04/rtc u:object_r:sysfs_rtc:s0
genfscon sysfs /devices/pci0000:00/0000:00:05.0 u:object_r:sysfs_virtio:s0
genfscon sysfs /power/pm_silentmode_hw_state u:object_r:sysfs_power:s0
genfscon proc /sys/vm/swappiness u:object_r:proc_swappiness:s0
genfscon proc /sys/vm/disk_based_swap u:object_r:proc_disk_based_swap:s0
1 change: 0 additions & 1 deletion vendor/init.te
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,2 +1 @@
allow init tmpfs:lnk_file create;
allow init vendor_data_file:dir mounton;
Loading