PeterGSI/android_device_peter_gsi
1
0
Fork 1
Code Issues Pull requests Projects Releases Wiki Activity

Compare commits

base: PeterGSI:6c1fc2c07530fff3cd77316c41a26fa90557b02a
Branches Tags
PeterGSI:aosp16
PeterGSI:aosp15
PeterGSI:aosp14
PeterGSI:aosp13
...
compare: PeterGSI:8b589d6b84b513c6a0ac90a5f3613af3caea4e0c
Branches Tags
PeterGSI:aosp16
PeterGSI:aosp15
PeterGSI:aosp14
PeterGSI:aosp13

2 commits
6c1fc2c075 ... 8b589d6b84

Author SHA1 Message Date
iovxw
8b589d6b84 gsi: sepolicy: Replace -isolated_app with -isolated_app_all in mtk_hal_mms 
Since Android 12, isolated_compute_app was introduced alongside
isolated_app, both grouped under the isolated_app_all attribute.

Using -isolated_app only excludes the original isolated_app type but
not isolated_compute_app, causing sepolicy_test to flag prohibited
permissions granted to isolated-like types.

Replace all occurrences of -isolated_app with -isolated_app_all to
properly exclude the full set of isolated app domains.
 2026-03-29 13:44:17 -04:00
iovxw
538d7f77e2 gsi: sepolicy: Add genfs_contexts rule for Jelly Max LED driver 2026-03-29 13:44:15 -04:00
2 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
sepolicy/private/genfs_contexts Normal file
View file

@ -0,0 +1,2 @@
# AW2033 LED driver in Unihertz Jelly Max
genfscon sysfs "/devices/platform/soc/11d71000.i2c/i2c-11/11-0045/leds" u:object_r:sysfs_leds:s0

6
sepolicy/private/mtk_hal_mms.te
View file

@ -1,6 +1,6 @@
attribute hal_mms_server;
binder_call({appdomain -isolated_app}, hal_mms_server)
binder_call(hal_mms_server, {appdomain -isolated_app})
binder_call({appdomain -isolated_app_all}, hal_mms_server)
binder_call(hal_mms_server, {appdomain -isolated_app_all})
type mtk_hal_mms_hwservice, hwservice_manager_type;
allow { appdomain -isolated_app } mtk_hal_mms_hwservice:hwservice_manager find;
allow { appdomain -isolated_app_all } mtk_hal_mms_hwservice:hwservice_manager find;