94 files changed, 987 insertions, 1322 deletions
diff --git a/common/sepolicy/hal_memtrack_default.te b/common/sepolicy/hal_memtrack_default.te index 6db0312..6cde1cc 100644 --- a/common/sepolicy/hal_memtrack_default.te +++ b/common/sepolicy/hal_memtrack_default.te @@ -1,3 +1,5 @@ +typeattribute hal_memtrack_default mlstrustedsubject; + allow hal_memtrack_default proc:file { open read getattr }; allow hal_memtrack_default system_app:file { open read getattr }; allow hal_memtrack_default system_app:dir { search }; @@ -11,18 +13,27 @@ allow hal_memtrack_default hal_dumpstate_default:file { open read getattr }; allow hal_memtrack_default hal_dumpstate_default:dir { search }; allow hal_memtrack_default hal_configstore_default:file { open read getattr }; allow hal_memtrack_default hal_configstore_default:dir { search }; -allow hal_memtrack_default hal_usb_default:file { open read getattr }; -allow hal_memtrack_default hal_usb_default:dir { search }; -allow hal_memtrack_default hal_power_default:dir { search }; -allow hal_memtrack_default hal_power_default:file { read }; -allow hal_memtrack_default { priv_app platform_app untrusted_app }:dir { search }; -allow hal_memtrack_default { priv_app platform_app untrusted_app }:file { read }; +allow hal_memtrack_default { priv_app platform_app untrusted_app su drmserver installd keystore mdnsd isolated_app }:dir { search }; +allow hal_memtrack_default { priv_app platform_app untrusted_app su drmserver installd keystore mdnsd isolated_app }:file { read open getattr }; + +allow hal_memtrack_default { gatekeeperd tombstoned webview_zygote zygote netd wificond sdcardd hal_camera_default hal_tv_cec_default }:dir { search }; +allow hal_memtrack_default { gatekeeperd tombstoned webview_zygote zygote netd wificond sdcardd hal_camera_default hal_tv_cec_default }:file { read open getattr }; + +allow hal_memtrack_default { hal_audio_default hal_usb_default hal_power_default hal_wifi_default hal_drm_default }:dir { search }; +allow hal_memtrack_default { hal_audio_default hal_usb_default hal_power_default hal_wifi_default hal_drm_default }:file { read open getattr }; +allow hal_memtrack_default { hal_graphics_composer_default hal_graphics_allocator_default hal_gatekeeper_default }:dir { search }; +allow hal_memtrack_default { hal_graphics_composer_default hal_graphics_allocator_default hal_gatekeeper_default }:file { read open getattr }; + +allow hal_memtrack_default { hal_graphics_composer_default hal_graphics_allocator_default hal_gatekeeper_default }:dir { search }; +allow hal_memtrack_default { hal_graphics_composer_default hal_graphics_allocator_default hal_gatekeeper_default }:file { read open getattr }; + +allow hal_memtrack_default { hal_keymaster_default droidvold adbd tee hdmicecd bluetooth untrusted_app_25 }:dir { search }; +allow hal_memtrack_default { hal_keymaster_default droidvold adbd tee hdmicecd bluetooth untrusted_app_25 }:file { read open getattr }; + +allow hal_memtrack_default { mediadrmserver mediaextractor mediametrics mediacodec audioserver cameraserver mediaserver }:dir { search }; +allow hal_memtrack_default { mediadrmserver mediaextractor mediametrics mediacodec audioserver cameraserver mediaserver }:file { read open getattr }; -allow hal_memtrack_default { logd ueventd vold system_server init }:dir { search }; -allow hal_memtrack_default { logd ueventd vold system_server init }:file { read open getattr }; +allow hal_memtrack_default { logd ueventd vold system_server init shell surfaceflinger lmkd healthd system_control }:dir { search }; +allow hal_memtrack_default { logd ueventd vold system_server init shell surfaceflinger lmkd healthd system_control }:file { read open getattr }; -allow hal_memtrack_default untrusted_app:dir { search }; -allow hal_memtrack_default untrusted_app:file { read open }; -allow hal_memtrack_default platform_app:dir { search }; -allow hal_memtrack_default untrusted_app:file { read open getattr};
\ No newline at end of file |