diff --git a/device.te b/device.te index cb15eeb9839890b4aac73e47e4ed1566fb7f3e0f..9fc4d18f5a3511493dd26865b461146852fa10f1 100644 --- a/device.te +++ b/device.te @@ -39,6 +39,7 @@ type vcs_device, dev_type; type zero_device, dev_type; type fuse_device, dev_type; type ion_device, dev_type; +type gps_device, dev_type; # All devices have a uart for the hci # attach service. The uart dev node diff --git a/file.te b/file.te index f18eb23ba97efb47d1e0c944c8da6a2fa40affe4..ba85ca5d27e7eea47e88cbcb8293125fada848ee 100644 --- a/file.te +++ b/file.te @@ -79,6 +79,9 @@ type vold_socket, file_type; type wpa_socket, file_type; type zygote_socket, file_type; +# UART (for GPS) control proc file +type gps_control, file_type; + # Allow files to be created in their appropriate filesystems. allow fs_type self:filesystem associate; allow sysfs_type sysfs:filesystem associate; diff --git a/ocontexts b/ocontexts index 7cbb989757810f1e53b148573d5574bd3d3d012c..a3e7d9105b94a0768822f44d234f5a5db7984193 100644 --- a/ocontexts +++ b/ocontexts @@ -52,6 +52,9 @@ genfscon rootfs / u:object_r:rootfs:s0 # proc labeling can be further refined (longest matching prefix). genfscon proc / u:object_r:proc:s0 genfscon proc /net/xt_qtaguid/ctrl u:object_r:qtaguid:s0 +# These proc entries are for the CSR GPS chip +# XXX Can we label these as device specific? +genfscon proc /mcspi1_cs3_ctrl u:object_r:gps_control:s0 # selinuxfs booleans can be individually labeled. genfscon selinuxfs / u:object_r:selinuxfs:s0 genfscon cgroup / u:object_r:cgroup:s0 diff --git a/rild.te b/rild.te index 033fc847171b55c3d9f3063c09c921ae5f91807c..917634807475dd11071e0585bf55f5a5c0948aa5 100644 --- a/rild.te +++ b/rild.te @@ -34,3 +34,6 @@ allow rild sysfs:file rw_file_perms; # property service allow rild rild_prop:property_service set; allow rild radio_prop:property_service set; + +# Read/Write to uart driver (for GPS) +allow rild gps_device:chr_file rw_file_perms; diff --git a/system.te b/system.te index 2030af46789484ce4c95769cf6608d0bd88e1ac4..1a94c75275d2ff5a7535d8c03c8b5061918cbdd6 100644 --- a/system.te +++ b/system.te @@ -187,3 +187,8 @@ allow system system_file:file x_file_perms; # XXX dontaudit candidate allow system domain:dir r_dir_perms; allow system domain:file r_file_perms; + +# LocationManager(e.g, GPS) needs to read and write +# to uart driver and ctrl proc entry +allow system gps_device:chr_file rw_file_perms; +allow system gps_control:file rw_file_perms;