diff options
author | Ricardo Cerqueira <cyanogenmod@cerqueira.org> | 2013-11-11 20:40:36 +0000 |
---|---|---|
committer | Ricardo Cerqueira <cyanogenmod@cerqueira.org> | 2013-11-11 20:40:36 +0000 |
commit | 9ab9fdc73ead528fdf978b7d09efa908bb90f21b (patch) | |
tree | 4f41333bd27a3129b63c1bcd1149536c8566b591 | |
parent | cceb9faf6b0784531b9945665d09eed888cdab35 (diff) | |
download | device_samsung_i9300-9ab9fdc73ead528fdf978b7d09efa908bb90f21b.zip device_samsung_i9300-9ab9fdc73ead528fdf978b7d09efa908bb90f21b.tar.gz device_samsung_i9300-9ab9fdc73ead528fdf978b7d09efa908bb90f21b.tar.bz2 |
selinux: Re-enable the device-specific policies
Change-Id: I59769775be803ae6f175e4195fdde14528694fdd
-rw-r--r-- | BoardConfig.mk | 28 | ||||
-rw-r--r-- | selinux/file_contexts | 3 | ||||
-rw-r--r-- | selinux/system.te | 2 |
3 files changed, 15 insertions, 18 deletions
diff --git a/BoardConfig.mk b/BoardConfig.mk index af1e33e..70fac36 100644 --- a/BoardConfig.mk +++ b/BoardConfig.mk @@ -36,20 +36,20 @@ TARGET_RECOVERY_FSTAB := device/samsung/i9300/rootdir/fstab.smdk4x12 RECOVERY_FSTAB_VERSION := 2 # Selinux -#BOARD_SEPOLICY_DIRS += \ -# device/samsung/i9300/selinux -# -#BOARD_SEPOLICY_UNION += \ -# device.te \ -# domain.te \ -# file.te \ -# file_contexts \ -# init.te \ -# mediaserver.te \ -# rild.te \ -# system.te \ -# ueventd.te \ -# wpa_supplicant.te +BOARD_SEPOLICY_DIRS += \ + device/samsung/i9300/selinux + +BOARD_SEPOLICY_UNION += \ + device.te \ + domain.te \ + file.te \ + file_contexts \ + init.te \ + mediaserver.te \ + rild.te \ + system.te \ + ueventd.te \ + wpa_supplicant.te # assert TARGET_OTA_ASSERT_DEVICE := m0,i9300,GT-I9300 diff --git a/selinux/file_contexts b/selinux/file_contexts index 93065b8..55022ec 100644 --- a/selinux/file_contexts +++ b/selinux/file_contexts @@ -3,9 +3,6 @@ /dev/ump u:object_r:mali_device:s0 /dev/fimg2d u:object_r:mali_device:s0 -# NFC -/dev/pn544 u:object_r:nfc_device:s0 - # RIL /dev/umts_boot0 u:object_r:radio_device:s0 /dev/umts_boot1 u:object_r:radio_device:s0 diff --git a/selinux/system.te b/selinux/system.te index 0ac9cfc..395aeea 100644 --- a/selinux/system.te +++ b/selinux/system.te @@ -1,4 +1,4 @@ -allow system uinput_device:chr_file { read ioctl write open }; +allow system input_device:chr_file { read ioctl write open }; allow system sensors_device:chr_file { read open }; allow system sensors_data_file:file r_file_perms; allow system wpa_socket:unix_dgram_socket sendto; |