android_device_xiaomi_sm725.../sepolicy/vendor/batterysecret.te
Sebastiano Barezzi c2c941216a
sm8250-common: Initial common sepolicies
* Adapted from xiaomi-sm6150 and xiaomi-sm6250

Co-authored-by: Pig <pig.priv@gmail.com>
Co-authored-by: Zinadin Zidan <zidan.roking@gmail.com>
Co-authored-by: Utsav Balar <utsavbalar1231@gmail.com>
Co-authored-by: Ramii Ahmed <ramy@ahmedramy.com>
Change-Id: Ie64d863d6d36bdebb79d328de9ede5826b1cd486
2021-03-29 08:27:20 +02:00

51 lines
1.2 KiB
Plaintext

type batterysecret, domain;
type batterysecret_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(batterysecret)
r_dir_file(batterysecret, cgroup)
r_dir_file(batterysecret, mnt_vendor_file)
r_dir_file(batterysecret, vendor_sysfs_battery_supply)
r_dir_file(batterysecret, sysfs_batteryinfo)
r_dir_file(batterysecret, sysfs_type)
r_dir_file(batterysecret, vendor_sysfs_usb_supply)
r_dir_file(batterysecret, vendor_sysfs_usbpd_device)
allow batterysecret {
mnt_vendor_file
persist_subsys_file
rootfs
}:dir rw_dir_perms;
allow batterysecret {
persist_subsys_file
sysfs
vendor_sysfs_battery_supply
sysfs_usb
vendor_sysfs_usb_supply
vendor_sysfs_usbpd_device
}:file w_file_perms;
allow batterysecret kmsg_device:chr_file w_file_perms;
allow batterysecret self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;
allow batterysecret self:global_capability_class_set {
sys_tty_config
sys_boot
};
allow batterysecret self:capability {
chown
fsetid
};
allow batterysecret {
system_suspend_hwservice
hidl_manager_hwservice
}:hwservice_manager find;
binder_call(batterysecret, system_suspend_server)
wakelock_use(batterysecret)