From 5da546820c9a49e40849bc30a4d5d5119b5ccd47 Mon Sep 17 00:00:00 2001 From: Shanshan Guo Date: Sat, 18 Jan 2020 10:22:36 +0800 Subject: [PATCH] [ALPS04968083] SEPolicy: Modify sepolicy files mode and type [Detail] The mode of sepolicy files should be -rw-r--r--, and the type should be ASCII text with Unix/Linux format. [Solution] 1.Use chmod 0644 to change sepolicy files mode. 2.Use iconv -t ASCII and dos2unix to change sepolicy files type and format. MTK-Commit-Id: ee386fd7ca89105f70b96f6b58c5f0e372fe9a4b Change-Id: Iac13b1ea8a4546168f68a7918acdcdb0588f6630 CR-Id: ALPS04968083 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK --- non_plat/connsyslogger.te | 0 non_plat/hal_mms.te | 0 non_plat/hal_nvramagent.te | 0 non_plat/hal_thermal_default.te | 0 non_plat/hwservice_contexts | 154 +++++++++++++-------------- non_plat/ioctl_defines | 0 non_plat/mediaswcodec.te | 0 non_plat/modemdbfilter_service.te | 0 non_plat/mtk_hal_md_dbfilter.te | 12 +-- non_plat/mtk_hal_mms.te | 0 non_plat/mtk_hal_wifi.te | 0 non_plat/netd.te | 12 +-- non_plat/uncrypt.te | 0 non_plat/vold_prepare_subdirs.te | 0 plat_private/emdlogger.te | 0 plat_private/file.te | 0 plat_private/lbs_dbg.te | 0 plat_private/loghidlsysservice.te | 0 plat_private/modemdbfilter_client.te | 0 plat_private/netdiag.te | 0 plat_public/emdlogger.te | 0 plat_public/mdlogger.te | 0 plat_public/modemdbfilter_client.te | 0 plat_public/netdiag.te | 0 24 files changed, 89 insertions(+), 89 deletions(-) mode change 100755 => 100644 non_plat/connsyslogger.te mode change 100755 => 100644 non_plat/hal_mms.te mode change 100755 => 100644 non_plat/hal_nvramagent.te mode change 100755 => 100644 non_plat/hal_thermal_default.te mode change 100755 => 100644 non_plat/ioctl_defines mode change 100755 => 100644 non_plat/mediaswcodec.te mode change 100755 => 100644 non_plat/modemdbfilter_service.te mode change 100755 => 100644 non_plat/mtk_hal_md_dbfilter.te mode change 100755 => 100644 non_plat/mtk_hal_mms.te mode change 100755 => 100644 non_plat/mtk_hal_wifi.te mode change 100755 => 100644 non_plat/uncrypt.te mode change 100755 => 100644 non_plat/vold_prepare_subdirs.te mode change 100755 => 100644 plat_private/emdlogger.te mode change 100755 => 100644 plat_private/file.te mode change 100755 => 100644 plat_private/lbs_dbg.te mode change 100755 => 100644 plat_private/loghidlsysservice.te mode change 100755 => 100644 plat_private/modemdbfilter_client.te mode change 100755 => 100644 plat_private/netdiag.te mode change 100755 => 100644 plat_public/emdlogger.te mode change 100755 => 100644 plat_public/mdlogger.te mode change 100755 => 100644 plat_public/modemdbfilter_client.te mode change 100755 => 100644 plat_public/netdiag.te diff --git a/non_plat/connsyslogger.te b/non_plat/connsyslogger.te old mode 100755 new mode 100644 diff --git a/non_plat/hal_mms.te b/non_plat/hal_mms.te old mode 100755 new mode 100644 diff --git a/non_plat/hal_nvramagent.te b/non_plat/hal_nvramagent.te old mode 100755 new mode 100644 diff --git a/non_plat/hal_thermal_default.te b/non_plat/hal_thermal_default.te old mode 100755 new mode 100644 diff --git a/non_plat/hwservice_contexts b/non_plat/hwservice_contexts index fbce7d3..614e502 100644 --- a/non_plat/hwservice_contexts +++ b/non_plat/hwservice_contexts @@ -1,77 +1,77 @@ -vendor.mediatek.hardware.bluetooth::IMtkBluetoothHci u:object_r:mtk_hal_bluetooth_hwservice:s0 - -# Date: 2017/05/9 -vendor.mediatek.hardware.mtkradioex::IMtkRadioEx u:object_r:mtk_hal_rild_hwservice:s0 -vendor.mediatek.hardware.radio::ISap u:object_r:mtk_hal_rild_hwservice:s0 -vendor.mediatek.hardware.interfaces_tc1.mtkradioex_tc1::IMtkRadioEx u:object_r:mtk_hal_rild_hwservice:s0 -vendor.mediatek.hardware.radio_op::IRadioOp u:object_r:mtk_hal_rild_hwservice:s0 - -# Date: 2017/06/07 -# power hidl -vendor.mediatek.hardware.mtkpower::IMtkPerf u:object_r:mtk_hal_power_hwservice:s0 -vendor.mediatek.hardware.mtkpower::IMtkPower u:object_r:mtk_hal_power_hwservice:s0 -vendor.mediatek.hardware.power::IPerf u:object_r:mtk_hal_power_hwservice:s0 -vendor.mediatek.hardware.power::IPower u:object_r:mtk_hal_power_hwservice:s0 - - - -# Date: 2017/06/12 -# LBS HIDL -vendor.mediatek.hardware.lbs::ILbs u:object_r:mtk_hal_lbs_hwservice:s0 - -# Date : 2017/06/27 -# IMSA HIDL -vendor.mediatek.hardware.imsa::IImsa u:object_r:mtk_hal_imsa_hwservice:s0 - -# Date : 2017/07/12 -#nvram hidl -vendor.mediatek.hardware.nvram::INvram u:object_r:nvram_agent_binder_hwservice:s0 - -# Date : 2017/07/19 -# PQ HIDL -vendor.mediatek.hardware.pq::IPictureQuality u:object_r:mtk_hal_pq_hwservice:s0 - -# Date: 2017/07/20 -# keymaster attestation hidl -vendor.mediatek.hardware.keymaster_attestation::IKeymasterDevice u:object_r:mtk_hal_keyattestation_hwservice:s0 - -# Date: 2018/05/25 -# FM HIDL -vendor.mediatek.hardware.fm::IFmRadio u:object_r:mtk_hal_fm_hwservice:s0 - -# Date: 2018/03/23 -# log hidl -vendor.mediatek.hardware.log::ILog u:object_r:mtk_hal_log_hwservice:s0 - -# Date: 2018/06/26 -# em hidl -vendor.mediatek.hardware.engineermode::IEmd u:object_r:mtk_hal_em_hwservice:s0 - -# Date : 2018/07/02 -# MMS HIDL -vendor.mediatek.hardware.mms::IMms u:object_r:mtk_hal_mms_hwservice:s0 - -# Date : 2019/04/19 -# GPU HIDL -vendor.mediatek.hardware.gpu::IGraphicExt u:object_r:mtk_hal_gpu_hwservice:s0 - -# Date: 2019/06/12 -# modem db filter hidl -vendor.mediatek.hardware.modemdbfilter::ICopyDBFilter u:object_r:mtk_hal_md_dbfilter_hwservice:s0 - -# Date: 2019/07/04 -vendor.mediatek.hardware.camera.lomoeffect::ILomoEffect u:object_r:hal_camera_hwservice:s0 -vendor.mediatek.hardware.camera.ccap::ICCAPControl u:object_r:hal_camera_hwservice:s0 -vendor.mediatek.hardware.camera.bgservice::IBGService u:object_r:mtk_hal_bgs_hwservice:s0 -vendor.mediatek.hardware.camera.isphal::IISPModule u:object_r:mtk_hal_bgs_hwservice:s0 - -# Date : 2019/07/31 -vendor.mediatek.hardware.camera.postproc::IPostDevice u:object_r:mtk_hal_bgs_hwservice:s0 - -# Date : 2019/07/16 -# HDMI HIDL -vendor.mediatek.hardware.hdmi::IMtkHdmiService u:object_r:mtk_hal_hdmi_hwservice:s0 - -#Date: 2019/09/02 -# ATMs hidl -vendor.mediatek.hardware.camera.atms::IATMs u:object_r:hal_camera_hwservice:s0 \ No newline at end of file +vendor.mediatek.hardware.bluetooth::IMtkBluetoothHci u:object_r:mtk_hal_bluetooth_hwservice:s0 + +# Date: 2017/05/9 +vendor.mediatek.hardware.mtkradioex::IMtkRadioEx u:object_r:mtk_hal_rild_hwservice:s0 +vendor.mediatek.hardware.radio::ISap u:object_r:mtk_hal_rild_hwservice:s0 +vendor.mediatek.hardware.interfaces_tc1.mtkradioex_tc1::IMtkRadioEx u:object_r:mtk_hal_rild_hwservice:s0 +vendor.mediatek.hardware.radio_op::IRadioOp u:object_r:mtk_hal_rild_hwservice:s0 + +# Date: 2017/06/07 +# power hidl +vendor.mediatek.hardware.mtkpower::IMtkPerf u:object_r:mtk_hal_power_hwservice:s0 +vendor.mediatek.hardware.mtkpower::IMtkPower u:object_r:mtk_hal_power_hwservice:s0 +vendor.mediatek.hardware.power::IPerf u:object_r:mtk_hal_power_hwservice:s0 +vendor.mediatek.hardware.power::IPower u:object_r:mtk_hal_power_hwservice:s0 + + + +# Date: 2017/06/12 +# LBS HIDL +vendor.mediatek.hardware.lbs::ILbs u:object_r:mtk_hal_lbs_hwservice:s0 + +# Date : 2017/06/27 +# IMSA HIDL +vendor.mediatek.hardware.imsa::IImsa u:object_r:mtk_hal_imsa_hwservice:s0 + +# Date : 2017/07/12 +#nvram hidl +vendor.mediatek.hardware.nvram::INvram u:object_r:nvram_agent_binder_hwservice:s0 + +# Date : 2017/07/19 +# PQ HIDL +vendor.mediatek.hardware.pq::IPictureQuality u:object_r:mtk_hal_pq_hwservice:s0 + +# Date: 2017/07/20 +# keymaster attestation hidl +vendor.mediatek.hardware.keymaster_attestation::IKeymasterDevice u:object_r:mtk_hal_keyattestation_hwservice:s0 + +# Date: 2018/05/25 +# FM HIDL +vendor.mediatek.hardware.fm::IFmRadio u:object_r:mtk_hal_fm_hwservice:s0 + +# Date: 2018/03/23 +# log hidl +vendor.mediatek.hardware.log::ILog u:object_r:mtk_hal_log_hwservice:s0 + +# Date: 2018/06/26 +# em hidl +vendor.mediatek.hardware.engineermode::IEmd u:object_r:mtk_hal_em_hwservice:s0 + +# Date : 2018/07/02 +# MMS HIDL +vendor.mediatek.hardware.mms::IMms u:object_r:mtk_hal_mms_hwservice:s0 + +# Date : 2019/04/19 +# GPU HIDL +vendor.mediatek.hardware.gpu::IGraphicExt u:object_r:mtk_hal_gpu_hwservice:s0 + +# Date: 2019/06/12 +# modem db filter hidl +vendor.mediatek.hardware.modemdbfilter::ICopyDBFilter u:object_r:mtk_hal_md_dbfilter_hwservice:s0 + +# Date: 2019/07/04 +vendor.mediatek.hardware.camera.lomoeffect::ILomoEffect u:object_r:hal_camera_hwservice:s0 +vendor.mediatek.hardware.camera.ccap::ICCAPControl u:object_r:hal_camera_hwservice:s0 +vendor.mediatek.hardware.camera.bgservice::IBGService u:object_r:mtk_hal_bgs_hwservice:s0 +vendor.mediatek.hardware.camera.isphal::IISPModule u:object_r:mtk_hal_bgs_hwservice:s0 + +# Date : 2019/07/31 +vendor.mediatek.hardware.camera.postproc::IPostDevice u:object_r:mtk_hal_bgs_hwservice:s0 + +# Date : 2019/07/16 +# HDMI HIDL +vendor.mediatek.hardware.hdmi::IMtkHdmiService u:object_r:mtk_hal_hdmi_hwservice:s0 + +#Date: 2019/09/02 +# ATMs hidl +vendor.mediatek.hardware.camera.atms::IATMs u:object_r:hal_camera_hwservice:s0 diff --git a/non_plat/ioctl_defines b/non_plat/ioctl_defines old mode 100755 new mode 100644 diff --git a/non_plat/mediaswcodec.te b/non_plat/mediaswcodec.te old mode 100755 new mode 100644 diff --git a/non_plat/modemdbfilter_service.te b/non_plat/modemdbfilter_service.te old mode 100755 new mode 100644 diff --git a/non_plat/mtk_hal_md_dbfilter.te b/non_plat/mtk_hal_md_dbfilter.te old mode 100755 new mode 100644 index 5abc292..2b8a4e6 --- a/non_plat/mtk_hal_md_dbfilter.te +++ b/non_plat/mtk_hal_md_dbfilter.te @@ -1,6 +1,6 @@ -# HwBinder IPC from client to server, and callbacks -binder_call(mtk_hal_md_dbfilter_client, mtk_hal_md_dbfilter_server) -binder_call(mtk_hal_md_dbfilter_server, mtk_hal_md_dbfilter_client) - -add_hwservice(mtk_hal_md_dbfilter_server, mtk_hal_md_dbfilter_hwservice) -allow mtk_hal_md_dbfilter_client mtk_hal_md_dbfilter_hwservice:hwservice_manager find; +# HwBinder IPC from client to server, and callbacks +binder_call(mtk_hal_md_dbfilter_client, mtk_hal_md_dbfilter_server) +binder_call(mtk_hal_md_dbfilter_server, mtk_hal_md_dbfilter_client) + +add_hwservice(mtk_hal_md_dbfilter_server, mtk_hal_md_dbfilter_hwservice) +allow mtk_hal_md_dbfilter_client mtk_hal_md_dbfilter_hwservice:hwservice_manager find; diff --git a/non_plat/mtk_hal_mms.te b/non_plat/mtk_hal_mms.te old mode 100755 new mode 100644 diff --git a/non_plat/mtk_hal_wifi.te b/non_plat/mtk_hal_wifi.te old mode 100755 new mode 100644 diff --git a/non_plat/netd.te b/non_plat/netd.te index 9dbf77e..1d88eb9 100644 --- a/non_plat/netd.te +++ b/non_plat/netd.te @@ -5,8 +5,8 @@ # Date : WK14.34 # Operation : Migration -# Purpose : For WIFI SANITY test to set FW path(STA/P2P/AP) -# Owner£º TingTing Lei +# Purpose : For WIFI SANITY test to set FW path(STA/P2P/AP) +# Owner: TingTing Lei allow netd wmtWifi_device:chr_file { write open }; # Date : WK14.34 @@ -15,20 +15,20 @@ allow netd self:capability fsetid; # Date : WK14.34 # Operation : Migration -# Purpose : APP +# Purpose: APP allow netd platform_app:fd use; # Date : WK14.37 # Operation : Migration -# Purpose : PPPOE Test +# Purpose : PPPOE Test # Owner : lina wang allow netd ppp:process sigkill; # Date : WK14.39 # Operation : Migration # Purpose : MDLogger USB logging -# Owner : Bo shang +# Owner : Bo shang allow netd mdlogger:fd use; allow netd mdlogger:tcp_socket { read write }; allow netd mdlogger:tcp_socket { getopt setopt }; @@ -36,7 +36,7 @@ allow netd mdlogger:tcp_socket { getopt setopt }; # Date : WK14.41 # Operation : Migration # Purpose : network logging -# Owner : Bo shang +# Owner : Bo shang allow netd netdiag:fd use; allow netd netdiag:udp_socket { read write getopt setopt}; diff --git a/non_plat/uncrypt.te b/non_plat/uncrypt.te old mode 100755 new mode 100644 diff --git a/non_plat/vold_prepare_subdirs.te b/non_plat/vold_prepare_subdirs.te old mode 100755 new mode 100644 diff --git a/plat_private/emdlogger.te b/plat_private/emdlogger.te old mode 100755 new mode 100644 diff --git a/plat_private/file.te b/plat_private/file.te old mode 100755 new mode 100644 diff --git a/plat_private/lbs_dbg.te b/plat_private/lbs_dbg.te old mode 100755 new mode 100644 diff --git a/plat_private/loghidlsysservice.te b/plat_private/loghidlsysservice.te old mode 100755 new mode 100644 diff --git a/plat_private/modemdbfilter_client.te b/plat_private/modemdbfilter_client.te old mode 100755 new mode 100644 diff --git a/plat_private/netdiag.te b/plat_private/netdiag.te old mode 100755 new mode 100644 diff --git a/plat_public/emdlogger.te b/plat_public/emdlogger.te old mode 100755 new mode 100644 diff --git a/plat_public/mdlogger.te b/plat_public/mdlogger.te old mode 100755 new mode 100644 diff --git a/plat_public/modemdbfilter_client.te b/plat_public/modemdbfilter_client.te old mode 100755 new mode 100644 diff --git a/plat_public/netdiag.te b/plat_public/netdiag.te old mode 100755 new mode 100644