common: Add secril_config_svc

Change-Id: I3c88da17a638a78ab58bcb33bb9b7d7e1fc7509a

diff --git a/common/vendor/file_contexts b/common/vendor/file_contexts
index 80eb20fd84fd7f50fb1c3cda770629ab5ba1208a..c5fc2f60a5a7ef273ff8a2d6a9331248c90b10c3 100644 (file)
--- a/common/vendor/file_contexts
+++ b/common/vendor/file_contexts
@@ -61,6 +61,7 @@
 
 ### VENDOR
 /(vendor|system/vendor)/bin/cbd              u:object_r:cbd_exec:s0
+/(vendor|system/vendor)/bin/secril_config_svc    u:object_r:secril_config_svc_exec:s0
 
 /(vendor|system/vendor)/bin/hw/android\.hardware\.biometrics\.fingerprint@[0-9].[0-9]-service\.samsung    u:object_r:hal_fingerprint_default_exec:s0
 /(vendor|system/vendor)/bin/hw/android\.hardware\.light@[0-9].[0-9]-service\.samsung              u:object_r:hal_light_default_exec:s0

diff --git a/common/vendor/property_contexts b/common/vendor/property_contexts
index 3fb4917d3a11b5ff00a1eef15b9abf64dadec40b..dfc88111f58d8e63406d9a25ebb7bbc9e0541547 100644 (file)
--- a/common/vendor/property_contexts
+++ b/common/vendor/property_contexts
@@ -1,3 +1,8 @@
 ### cbd
 vendor.cbd.                    u:object_r:vendor_cbd_prop:s0
 persist.vendor.cbd.            u:object_r:vendor_radio_prop:s0
+
+### radio
+ro.multisim.                   u:object_r:vendor_radio_prop:s0
+ro.vendor.multisim.            u:object_r:vendor_radio_prop:s0
+ro.vendor.radio.               u:object_r:vendor_radio_prop:s0

diff --git a/common/vendor/secril_config_svc.te b/common/vendor/secril_config_svc.te
new file mode 100644 (file)
index 0000000..7396d75
--- /dev/null
+++ b/common/vendor/secril_config_svc.te
@@ -0,0 +1,17 @@
+# secril_config_svc.te
+
+type secril_config_svc, domain;
+type secril_config_svc_exec, exec_type, vendor_file_type, file_type;
+
+# secril_config_svc is started by init, type transit from init domain to secril_config_svc domain
+init_daemon_domain(secril_config_svc)
+
+# /mnt/vendor/efs/factory.prop
+# /mnt/vendor/efs/telephony.prop
+allow secril_config_svc efs_file:dir search;
+allow secril_config_svc efs_file:file r_file_perms;
+
+# ro.multisim.
+# ro.vendor.multisim.
+# ro.vendor.radio.default_network
+set_prop(secril_config_svc, vendor_radio_prop)