diff options
author | RGIB <gibellini.roberto@gmail.com> | 2016-11-27 23:45:35 +0100 |
---|---|---|
committer | RGIB <gibellini.roberto@gmail.com> | 2016-11-27 23:45:35 +0100 |
commit | 1e3c6c4a20cde875b23c69afd4025c492511e822 (patch) | |
tree | 1d356fd78e138ac33c1d1dc99a890594ca0a440c /selinux/kickstart.te | |
parent | bae7ee3f1d348c29f8eb604ce774d22757460927 (diff) | |
download | device_samsung_i9305-1e3c6c4a20cde875b23c69afd4025c492511e822.zip device_samsung_i9305-1e3c6c4a20cde875b23c69afd4025c492511e822.tar.gz device_samsung_i9305-1e3c6c4a20cde875b23c69afd4025c492511e822.tar.bz2 |
i9305 : update selinux policies for MM
Change-Id: Ia96cb118083b20e87b94412ab5072be34cd6e806
Diffstat (limited to 'selinux/kickstart.te')
-rwxr-xr-x | selinux/kickstart.te | 44 |
1 files changed, 0 insertions, 44 deletions
diff --git a/selinux/kickstart.te b/selinux/kickstart.te deleted file mode 100755 index 14e1ad5..0000000 --- a/selinux/kickstart.te +++ /dev/null @@ -1,44 +0,0 @@ -# kickstart processes and scripts -type kickstart, domain; -type kickstart_exec, exec_type, file_type; - -# kickstart_checker.sh talks to init over the property socket -unix_socket_connect(kickstart, property, init) - -# Start /system/bin/qcks from init -init_daemon_domain(kickstart) - -# Spawn /system/bin/efsks and /system/bin/ks -allow kickstart kickstart_exec:file { open execute_no_trans getattr }; - -# Run dd on m9kefs[123] block devices; write to /data/qcks/ -# Run cat on firmware and m9kefs[123] data; write to /data/qcks/ -allow kickstart efs_block_device:blk_file rw_file_perms; -allow kickstart kickstart_data_file:file create_file_perms; -allow kickstart kickstart_data_file:dir rw_dir_perms; -allow kickstart radio_efs_file:file r_file_perms; -allow kickstart radio_efs_file:dir search; - -# Let qcks access /dev/mdm node (modem driver) -allow kickstart radio_device:chr_file rw_file_perms; - -# Allow /dev/ttyUSB0 access -allow kickstart radio_device:chr_file { write ioctl getattr }; - -# Allow to run toolbox commands -allow kickstart shell_exec:file rx_file_perms; -# Toolbox commands for firmware dd -allow kickstart system_file:file execute_no_trans; - -# Access to /dev/block/platform/msm_sdcc.1/by-name/m9kefs2 -allow kickstart block_device:dir { getattr write search }; - -# Set system property key -allow kickstart radio_prop:property_service set; - -allow kickstart shell_exec:file entrypoint; -# ls on /data/qcks/ -allow kickstart self:capability { dac_override setuid }; - -# XXX Label sysfs files with a specific type? -allow kickstart sysfs:file rw_file_perms;
\ No newline at end of file |