From a1adb42e88f2b26d3ee881eab946253d174a5ac8 Mon Sep 17 00:00:00 2001
From: sinanmohd <pcmsinan@gmail.com>
Date: Sun, 8 Jan 2023 06:00:31 +0530
Subject: Revert "veux: Import XiaomiParts from sm8250"

This reverts commit 3607af54ca48c8a145a97bab0cf5012d45ade555.
---
 sepolicy/private/devicesettings_app.te | 28 ----------------------------
 sepolicy/private/seapp_contexts        |  1 -
 sepolicy/public/devicesettings_app.te  |  3 ---
 sepolicy/vendor/thermal-engine.te      | 11 +++++++++++
 4 files changed, 11 insertions(+), 32 deletions(-)
 delete mode 100644 sepolicy/private/devicesettings_app.te
 delete mode 100644 sepolicy/private/seapp_contexts
 delete mode 100644 sepolicy/public/devicesettings_app.te
 create mode 100644 sepolicy/vendor/thermal-engine.te

(limited to 'sepolicy')

diff --git a/sepolicy/private/devicesettings_app.te b/sepolicy/private/devicesettings_app.te
deleted file mode 100644
index 6e6a44b..0000000
--- a/sepolicy/private/devicesettings_app.te
+++ /dev/null
@@ -1,28 +0,0 @@
-app_domain(devicesettings_app)
-
-# Allow devicesettings_app to find *_service
-allow devicesettings_app {
-  app_api_service
-  audioserver_service
-  cameraserver_service
-  drmserver_service
-  mediaextractor_service
-  mediametrics_service
-  mediaserver_service
-}:service_manager find;
-
-# Allow devicesettings_app read and write /data/data subdirectory
-allow devicesettings_app system_app_data_file:dir create_dir_perms;
-allow devicesettings_app system_app_data_file:{ file lnk_file } create_file_perms;
-
-# Allow binder communication with gpuservice
-binder_call(devicesettings_app, gpuservice)
-
-# Allow devicesettings_app to read and write to cgroup/sysfs_leds/sysfs_thermal
-allow devicesettings_app sysfs_leds:dir search;
-#allow devicesettings_app vendor_sysfs_graphics:dir search;
-allow devicesettings_app {
-  cgroup
-  sysfs_leds
-  sysfs_thermal
-}:{ file lnk_file } rw_file_perms;
\ No newline at end of file
diff --git a/sepolicy/private/seapp_contexts b/sepolicy/private/seapp_contexts
deleted file mode 100644
index 0b3253a..0000000
--- a/sepolicy/private/seapp_contexts
+++ /dev/null
@@ -1 +0,0 @@
-user=system seinfo=platform name=org.lineageos.settings domain=devicesettings_app type=system_app_data_file
\ No newline at end of file
diff --git a/sepolicy/public/devicesettings_app.te b/sepolicy/public/devicesettings_app.te
deleted file mode 100644
index 7af5e9b..0000000
--- a/sepolicy/public/devicesettings_app.te
+++ /dev/null
@@ -1,3 +0,0 @@
-type devicesettings_app, domain;
-typeattribute devicesettings_app mlstrustedsubject;
-dontaudit devicesettings_app default_prop:file read;
\ No newline at end of file
diff --git a/sepolicy/vendor/thermal-engine.te b/sepolicy/vendor/thermal-engine.te
new file mode 100644
index 0000000..6e59f5b
--- /dev/null
+++ b/sepolicy/vendor/thermal-engine.te
@@ -0,0 +1,11 @@
+allow vendor_thermal-engine {
+  vendor_sysfs_devfreq
+  thermal_data_file
+}:dir r_dir_perms;
+
+allow vendor_thermal-engine vendor_sysfs_devfreq:file rw_file_perms;
+
+# Rule for vendor_thermal-engine to access init process
+unix_socket_connect(vendor_thermal-engine, property, init);
+
+set_prop(vendor_thermal-engine, vendor_thermal_normal_prop)
\ No newline at end of file
-- 
cgit v1.2.3