diff options
| author | Stephen Smalley <sds@tycho.nsa.gov> | 2013-11-04 10:06:08 -0500 |
|---|---|---|
| committer | Ricardo Cerqueira <cyanogenmod@cerqueira.org> | 2014-04-11 00:13:28 +0100 |
| commit | 21f6c08158a7f1d3752c1523d8c93fc7f003895d (patch) | |
| tree | 8e71b49e131a29b0e222d6e2ac84f39901546d3e | |
| parent | a1565f5b8931ae68deea01464052d977902c1ba3 (diff) | |
Move audio_firmware_file and /data/misc/audio entry to core sepolicy.
file_contexts uses regexes, not a globs, so use (/.*)? rather than /*
to match the directory and anything beneath it.
Since /data/misc/audio is not device-specific, move it to core sepolicy.
Consider renaming this type in the future to audio_data_file, but that
is left to a separate change as it will require a restorecon_recursive
on mako.
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Change-Id: Iddc4539df686ec23edf2cf9e79e86ca353f480ce
| -rw-r--r-- | sepolicy/file.te | 1 | ||||
| -rw-r--r-- | sepolicy/file_contexts | 3 | ||||
| -rw-r--r-- | sepolicy/mediaserver.te | 3 |
3 files changed, 0 insertions, 7 deletions
diff --git a/sepolicy/file.te b/sepolicy/file.te index 839b0a4..d65815e 100644 --- a/sepolicy/file.te +++ b/sepolicy/file.te @@ -4,4 +4,3 @@ type qmux_bluetooth_socket, file_type; type qmux_gps_socket, file_type; type qmux_radio_socket, file_type; -type audio_firmware_file, file_type; diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts index ccbb9b6..5406505 100644 --- a/sepolicy/file_contexts +++ b/sepolicy/file_contexts @@ -20,9 +20,6 @@ # Qualcomm MSM Audio ACDB device /dev/msm_acdb u:object_r:msm_acdb_device:s0 -# Qualcomm audio firmware files -/data/misc/audio/* u:object_r:audio_firmware_file:s0 - /dev/ks_hsic_bridge u:object_r:kickstart_device:s0 /dev/efs_hsic_bridge u:object_r:kickstart_device:s0 diff --git a/sepolicy/mediaserver.te b/sepolicy/mediaserver.te index dacaacf..81fee64 100644 --- a/sepolicy/mediaserver.te +++ b/sepolicy/mediaserver.te @@ -8,6 +8,3 @@ allow mediaserver qmux_audio_socket:dir rw_dir_perms; # Permit mediaserver to create sockets allow mediaserver self:socket create; -# Grant access to audio firmware files to mediaserver -allow mediaserver audio_firmware_file:dir ra_dir_perms; -allow mediaserver audio_firmware_file:file create_file_perms; |