TimeKeep sepolicy atteempt 2

This commit is contained in:
Tad 2017-06-01 02:55:50 -04:00
parent aff20156b4
commit 3b85d8a04c
2 changed files with 14 additions and 5 deletions

View File

@ -247,12 +247,20 @@ deblobDevice() {
fi;
if [ -d sepolicy ]; then
#Switch to Sony TimeKeep
echo "/system/bin/timekeep u:object_r:timekeep_exec:s0" >> sepolicy/file_contexts;
echo "set_prop(system_app, timekeep_prop)" >> sepolicy/system_app.te;
echo "r_dir_file(system_app, sysfs_timekeep)" >> sepolicy/system_app.te;
echo "allow system_app time_data_file:dir { create_dir_perms search };" >> sepolicy/system_app.te;
echo "allow system_app time_data_file:file create_file_perms;" >> sepolicy/system_app.te;
echo "get_prop(shell, timekeep_prop)" >> sepolicy/shell.te;
echo "com.sony.timekeep u:object_r:timekeep_service:s0" >> sepolicy/service_contexts;
echo "type timekeep_service, service_manager_type;" >> sepolicy/service.te;
echo "user=system seinfo=platform name=com.sony.timekeep domain=system_app type=system_app_data_fil" >> sepolicy/seapp_contexts;
echo "persist.sys.timeadjust u:object_r:timekeep_prop:s0" >> sepolicy/property_contexts;
echo "type timekeep_prop, property_type;" >> sepolicy/property.te;
echo "persist.sys.timeadjust u:object_r:timekeep_prop:s0" >> sepolicy/property_contexts;
echo "com.sony.timekeep u:object_r:timekeep_service:s0" >> sepolicy/service_contexts;
echo "allow system_app timekeep_prop:property_service set" >> sepolicy/system_app.te;
echo -e "type timekeep, domain;\ntype timekeep_exec, exec_type, file_type;\ntype timekeep_service, service_manager_type;\ninit_daemon_domain(timekeep)\nallow timekeep self:capability { sys_time };" >> sepolicy/timekeep.te;
echo "/system/bin/timekeep u:object_r:timekeep_exec:s0" >> sepolicy/file_contexts;
echo "/sys/devices(/soc\.0|/soc)?/00-qcom,pm(8226|8941|8950|8974|8992|8994)_rtc/rtc/rtc0/since_epoch u:object_r:sysfs_timekeep:s0" >> sepolicy/file_contexts;
echo "type sysfs_timekeep, fs_type, sysfs_type;" >> sepolicy/file.te;
cp /tmp/ar/timekeep.te sepolicy/timekeep.te;
fi;
sed -i 's|service time_daemon /system/bin/time_daemon|service timekeep /system/bin/timekeep restore\n oneshot|' init.*.rc rootdir/init.*.rc rootdir/etc/init.*.rc &> /dev/null || true; #Switch to Sony TimeKeep
rm -f rootdir/etc/init.qti.ims.sh #Remove IMS startup script

View File

@ -24,6 +24,7 @@ mkdir -p /tmp/ar
cd /tmp/ar
wget https://spotco.us/hosts -N #XXX: /hosts is built from non-commercial use files, switch to /hsc for release
wget https://github.com/Ranks/emojione/raw/master/extras/fonts/emojione-android.ttf -N #XXX: Requires attribuition
wget https://raw.githubusercontent.com/omnirom/android_device_sony_loire-common/android-7.1/sepolicy/timekeep.te
#Accept all SDK licences, not normally needed but Gradle managed apps fail without it
mkdir -p "$ANDROID_HOME/licenses"