NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

non_plat: Label thermal binary and grant required perms

Browse Source 
Thermal binary is used to load, throttle, manage thermal profiles on MediaTek devices.
Label it and grant required permissions for it to operate without any issues.

Test: Boot and notice thermal has now a proper domain and works without an issues

Signed-off-by: Aayush Gupta <aayushgupta219@gmail.com>
Change-Id: Ibbc7e0ce907cd5eedd7826c658e7ef9c2d7a907d
This commit is contained in:
Aayush Gupta 2020-12-28 16:24:31 +05:30
parent c0c34708a5
commit 54f06d5d7c
2 changed files with 26 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
non_plat/file_contexts
View File

@ -688,3 +688,6 @@
# Camera data files
/data/vendor/camera(/.*)? u:object_r:camera_vendor_data_file:s0
# Thermal
/(system\/vendor|vendor)/bin/thermal u:object_r:thermal_exec:s0

23
non_plat/thermal.te Normal file
View File

@ -0,0 +1,23 @@
type thermal_exec , exec_type, file_type, vendor_file_type;
type thermal ,domain;
init_daemon_domain(thermal)
net_domain(thermal)
allow thermal mtkrild:unix_stream_socket connectto;
allow thermal proc_thermal:dir search;
allow thermal proc_thermal:file { read write open };
allow thermal rild_oem_socket:sock_file write;
allow thermal netd_socket:sock_file write;
allow thermal netd:unix_stream_socket connectto;
allow thermal self:udp_socket create;
allow thermal self:udp_socket ioctl;
allow thermal rpc_socket:sock_file write;
allow thermal rild:unix_stream_socket connectto;
allow thermal thermal_manager_data_file:file rw_file_perms;
allow thermal thermalloadalgod:unix_stream_socket connectto;
allow thermal proc_mtkcooler:dir search;
set_prop(thermal ,mtk_thermal_config_prop)
vndbinder_use(thermal);