commit b0c91ec4caf8cd6e650daed970b2dabbdb2e0f07
author Tim Zimmermann <tim@linux4.de> Sun Feb 07 09:30:16 2021 +0100
committer Tim Zimmermann <tim@linux4.de> Mon Feb 08 20:05:43 2021 +0100
tree f80a422339da4ec3bf54476f08e600d094a8e4e6
parent eb60c7052e154fa6dddfe788d54e85159d2cde72

sepolicy: properly address sensor HAL denials

* This effectively reverts 519a4279c54c0db81a5af67118055f970956dbd2
* Instead of giving the HAL full rw access on these sysfs folders
  reorder the labels so they get correctly applied and the HAL only
  gets rw access where neccessary

Change-Id: Ib9b9f7bf14433274a8489d835abe5bfa36968812

sepolicy/vendor/file_contexts

diff --git a/sepolicy/vendor/file_contexts b/sepolicy/vendor/file_contexts
index 9455df6..7af931b 100644
--- a/sepolicy/vendor/file_contexts
+++ b/sepolicy/vendor/file_contexts
@@ -49,8 +49,10 @@
 /sys/devices/virtual/net(/.*)/mtu                             u:object_r:sysfs_net_mtu_writable:s0
 
 # Sensors
-/sys/devices/platform/11980000.contexthub(/.*)                u:object_r:sysfs_sensors_writable:s0
-/sys/devices/platform/11c30000.adc(/.*)                       u:object_r:sysfs_sensors_writable:s0
+/sys/devices/platform/11980000.contexthub(/.*)                u:object_r:sysfs_iio:s0
+/sys/devices/platform/11c30000.adc(/.*)                       u:object_r:sysfs_iio:s0
+/sys/devices/platform/11980000.contexthub(/.*)/buffer/enable  u:object_r:sysfs_sensors_writable:s0
+/sys/devices/platform/11980000.contexthub(/.*)/buffer/length  u:object_r:sysfs_sensors_writable:s0
 
 # GPS
 /sys/devices/soc0/machine                                     u:object_r:sysfs_sec_gps:s0