From: Nolen Johnson <johnsonnolen@gmail.com>
Date: Fri, 15 Apr 2022 22:12:34 +0000 (-0400)
Subject: exynos9610: restorecon_recursive fpdata/keystore directories
X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=b054c0eca326af552f8e29306fb0e42c7ddc3064;p=GitHub%2FLineageOS%2Fandroid_device_motorola_exynos9610-common.git

exynos9610: restorecon_recursive fpdata/keystore directories

* These are getting mis-labeled and causing a neverallow.

Change-Id: If1546db8876d4a9fe0f05b0cbdbf9b8c5fa0bfa4
---

diff --git a/configs/init/init.exynos9610.rc b/configs/init/init.exynos9610.rc
index 82b2241..76bbb93 100644
--- a/configs/init/init.exynos9610.rc
+++ b/configs/init/init.exynos9610.rc
@@ -274,6 +274,8 @@ on post-fs-data
     chown radio radio /mnt/vendor/efs/CP_AUDIO_SLSI.bin
 
 on boot
+    restorecon_recursive /data/system/users/0/fpdata/
+
     setprop wifi.interface wlan0
     write /proc/sys/vm/min_free_order_shift 4
 
@@ -462,6 +464,9 @@ chmod 664 /sys/devices/platform/11500000.mali/dvfs_max_lock
 #load ecd firmware
     write /proc/ecd/load_firmware 1
 
+    restorecon_recursive /data/vendor_de/0/fpdata/
+    restorecon_recursive /data/misc/keystore/
+
 service fuse_sdcard /system/bin/sdcard -u 1023 -g 1023 -d /mnt/media_rw/sdcard /storage/sdcard
     class late_start
     disabled
diff --git a/sepolicy/vendor/vendor_init.te b/sepolicy/vendor/vendor_init.te
index 70db74b..37c2dbc 100644
--- a/sepolicy/vendor/vendor_init.te
+++ b/sepolicy/vendor/vendor_init.te
@@ -17,6 +17,7 @@ allow vendor_init tmpfs:dir ra_dir_perms;
 allow vendor_init tmpfs:lnk_file create_file_perms;
 
 allow vendor_init system_data_root_file:dir { relabelto setattr };
+allow vendor_init fingerprint_vendor_data_file:dir r_dir_perms;
 
 allow vendor_init unlabeled:{ dir file } { read getattr relabelfrom };
 
diff --git a/sepolicy/vendor/vold.te b/sepolicy/vendor/vold.te
index 5333275..68d7f7d 100644
--- a/sepolicy/vendor/vold.te
+++ b/sepolicy/vendor/vold.te
@@ -3,3 +3,6 @@ allow vold {
     mnt_product_file
     mnt_vendor_file
 }:dir r_dir_perms;
+
+allow vold_prepare_subdirs fingerprint_vendor_data_file:dir { relabelfrom relabelto r_dir_perms };
+allow vold_prepare_subdirs fingerprint_vendor_data_file:dir r_dir_perms;