├── BoardConfig.mk
├── README.md
├── compatibility_matrix.xml
├── config.mk
├── extract-files.sh
├── mslgrootfs
    ├── Android.mk
    ├── losetup.sh
    ├── start-rootfs.sh
    └── tar-rootfs.sh
├── mslgservice
    ├── Android.mk
    └── mslgservice.rc
├── proprietary-files.txt
├── sepolicy
    ├── attributes
    ├── file_contexts
    ├── hal_mslgkeeper.te
    ├── hwservice_contexts
    ├── init.te
    ├── mslg_app.te
    ├── mslg_init.te
    ├── mslg_rootfs_file.te
    ├── mslgd.te
    ├── platform_app.te
    ├── property.te
    ├── property_contexts
    ├── seapp_contexts
    ├── system_app.te
    ├── system_server.te
    ├── untrusted_app_30.te
    └── vendor_init.te
└── setup-makefiles.sh


/BoardConfig.mk:
--------------------------------------------------------------------------------
1 | # HIDL
2 | DEVICE_FRAMEWORK_COMPATIBILITY_MATRIX_FILE += device/xiaomi/wps/compatibility_matrix.xml
3 | 
4 | # Sepolicy
5 | BOARD_VENDOR_SEPOLICY_DIRS += device/xiaomi/wps/sepolicy
6 | 
7 | # Inherit the proprietary files
8 | include vendor/xiaomi/wps/BoardConfigVendor.mk
9 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | ### How to use?
 2 | 
 3 | 1. Clone this repo to `device/xiaomi/wps`
 4 | 
 5 | 2. Inherit it from `device.mk` in device tree:
 6 | 
 7 | ```
 8 | $(call inherit-product-if-exists, device/xiaomi/wps/config.mk)
 9 | ```
10 | 
11 | 3. Inherit it from `BoardConfig.mk` in device tree:
12 | 
13 | ```
14 | include device/xiaomi/wps/BoardConfig.mk
15 | ```
16 | 


--------------------------------------------------------------------------------
/compatibility_matrix.xml:
--------------------------------------------------------------------------------
 1 | <compatibility-matrix version="5.0" type="framework">
 2 |     <hal format="hidl" optional="true">
 3 |         <name>vendor.xiaomi.mslg.keeper</name>
 4 |         <version>1.0</version>
 5 |         <interface>
 6 |             <name>IMSLgKeeper</name>
 7 |             <instance>default</instance>
 8 |         </interface>
 9 |     </hal>
10 | </compatibility-matrix>
11 | 


--------------------------------------------------------------------------------
/config.mk:
--------------------------------------------------------------------------------
 1 | # Namespace
 2 | PRODUCT_SOONG_NAMESPACES += \
 3 |     device/xiaomi/wps
 4 | 
 5 | # EXT2 UUID
 6 | PRODUCT_PACKAGES += \
 7 |     libext2_uuid.vendor
 8 | 
 9 | # MSLgRootfs
10 | PRODUCT_PACKAGES += \
11 |     losetup.sh \
12 |     start-rootfs.sh \
13 |     tar-rootfs.sh
14 | 
15 | # MSLgService
16 | PRODUCT_PACKAGES += \
17 |     mslgservice.rc
18 | 
19 | # Properties
20 | PRODUCT_VENDOR_PROPERTIES += \
21 |     ro.vendor.mslg.rootfs.version=rootfs-23.09.12.tgz \
22 |     sys.mslg.available=1
23 | 
24 | # Inherit the proprietary files
25 | $(call inherit-product, vendor/xiaomi/wps/wps-vendor.mk)
26 | 


--------------------------------------------------------------------------------
/extract-files.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/bash
 2 | #
 3 | # Copyright (C) 2016 The CyanogenMod Project
 4 | # Copyright (C) 2017-2020 The LineageOS Project
 5 | #
 6 | # SPDX-License-Identifier: Apache-2.0
 7 | #
 8 | 
 9 | set -e
10 | 
11 | DEVICE=wps
12 | VENDOR=xiaomi
13 | 
14 | # Load extract_utils and do some sanity checks
15 | MY_DIR="${BASH_SOURCE%/*}"
16 | if [[ ! -d "${MY_DIR}" ]]; then MY_DIR="${PWD}"; fi
17 | 
18 | ANDROID_ROOT="${MY_DIR}/../../.."
19 | 
20 | HELPER="${ANDROID_ROOT}/tools/extract-utils/extract_utils.sh"
21 | if [ ! -f "${HELPER}" ]; then
22 |     echo "Unable to find helper script at ${HELPER}"
23 |     exit 1
24 | fi
25 | source "${HELPER}"
26 | 
27 | # Default to sanitizing the vendor folder before extraction
28 | CLEAN_VENDOR=true
29 | 
30 | KANG=
31 | SECTION=
32 | 
33 | while [ "${#}" -gt 0 ]; do
34 |     case "${1}" in
35 |         -n | --no-cleanup )
36 |                 CLEAN_VENDOR=false
37 |                 ;;
38 |         -k | --kang )
39 |                 KANG="--kang"
40 |                 ;;
41 |         -s | --section )
42 |                 SECTION="${2}"; shift
43 |                 CLEAN_VENDOR=false
44 |                 ;;
45 |         * )
46 |                 SRC="${1}"
47 |                 ;;
48 |     esac
49 |     shift
50 | done
51 | 
52 | if [ -z "${SRC}" ]; then
53 |     SRC="adb"
54 | fi
55 | 
56 | # Initialize the helper
57 | setup_vendor "${DEVICE}" "${VENDOR}" "${ANDROID_ROOT}" false "${CLEAN_VENDOR}"
58 | 
59 | extract "${MY_DIR}/proprietary-files.txt" "${SRC}" "${KANG}" --section "${SECTION}"
60 | 
61 | "${MY_DIR}/setup-makefiles.sh"
62 | 


--------------------------------------------------------------------------------
/mslgrootfs/Android.mk:
--------------------------------------------------------------------------------
 1 | LOCAL_PATH := $(call my-dir)
 2 | 
 3 | include $(CLEAR_VARS)
 4 | LOCAL_MODULE       := losetup.sh
 5 | LOCAL_MODULE_CLASS := ETC
 6 | LOCAL_MODULE_TAGS  := optional
 7 | LOCAL_SRC_FILES    := losetup.sh
 8 | LOCAL_MODULE_PATH  := $(TARGET_OUT_VENDOR_EXECUTABLES)
 9 | include $(BUILD_PREBUILT)
10 | 
11 | include $(CLEAR_VARS)
12 | LOCAL_MODULE       := start-rootfs.sh
13 | LOCAL_MODULE_CLASS := ETC
14 | LOCAL_MODULE_TAGS  := optional
15 | LOCAL_SRC_FILES    := start-rootfs.sh
16 | LOCAL_MODULE_PATH  := $(TARGET_OUT_VENDOR_EXECUTABLES)
17 | include $(BUILD_PREBUILT)
18 | 
19 | include $(CLEAR_VARS)
20 | LOCAL_MODULE       := tar-rootfs.sh
21 | LOCAL_MODULE_CLASS := ETC
22 | LOCAL_MODULE_TAGS  := optional
23 | LOCAL_SRC_FILES    := tar-rootfs.sh
24 | LOCAL_MODULE_PATH  := $(TARGET_OUT_VENDOR_EXECUTABLES)
25 | include $(BUILD_PREBUILT)
26 | 


--------------------------------------------------------------------------------
/mslgrootfs/losetup.sh:
--------------------------------------------------------------------------------
 1 | #! /vendor/bin/sh
 2 | optimg=$(getprop vendor.mslg.mslgoptimg)
 3 | if [[ $optimg == "/dev/block/loop"* ]]; then
 4 |   echo "has already losetup, nothing to do"
 5 |   exit 1
 6 | else
 7 |   optimgloop=`losetup -f`
 8 | 
 9 |   while  [[ $optimgloop != "/dev/block/loop"* ]]
10 |   do
11 |     sleep 1
12 |     optimgloop=`losetup -f`
13 |   done
14 | 
15 |   losetup -r $optimgloop /vendor/etc/assets/mslgoptimg
16 |   setprop vendor.mslg.mslgoptimg $optimgloop
17 | 
18 |   usrimgloop=`losetup -f`
19 |   while  [[ $usrimgloop != "/dev/block/loop"* ]]
20 |   do
21 |     sleep 1
22 |     usrimgloop=`losetup -f`
23 |   done
24 | 
25 |   losetup -r $usrimgloop /vendor/etc/assets/mslgusrimg
26 |   setprop vendor.mslg.mslgusrimg $usrimgloop
27 | 
28 | fi
29 | 


--------------------------------------------------------------------------------
/mslgrootfs/start-rootfs.sh:
--------------------------------------------------------------------------------
1 | #! /vendor/bin/sh
2 | rm -rf /data/vendor/mslg/rootfs/home/xiaomi/core
3 | export TMPDIR=/dev/msl/rdp
4 | /vendor/bin/chroot /data/vendor/mslg/rootfs /bin/su - root <<EOF
5 | /bin/MSLGd
6 | EOF
7 | 


--------------------------------------------------------------------------------
/mslgrootfs/tar-rootfs.sh:
--------------------------------------------------------------------------------
 1 | #! /vendor/bin/sh
 2 | if [ -e "/data/vendor/mslg/rootfs/home/xiaomi/.config/Kingsoft/Office.conf" ]; then
 3 | mv /data/vendor/mslg/rootfs/home/xiaomi/.config/Kingsoft/Office.conf /data/vendor/mslg/rootfs/home/xiaomi/.config/Kingsoft/Office.conf_used
 4 | fi
 5 | if [ -e "/data/vendor/mslg/rootfs/home/xiaomi/.config/Kingsoft/WPSCloud.conf" ]; then
 6 | mv /data/vendor/mslg/rootfs/home/xiaomi/.config/Kingsoft/WPSCloud.conf /data/vendor/mslg/rootfs/home/xiaomi/.config/Kingsoft/WPSCloud.conf_used
 7 | fi
 8 | 
 9 | tar -xvf  /vendor/etc/assets/$1 -C /data/vendor/mslg/rootfs
10 | 
11 | if [ -e "/data/vendor/mslg/rootfs/home/xiaomi/.config/Kingsoft/Office.conf_used" ]; then
12 | mv /data/vendor/mslg/rootfs/home/xiaomi/.config/Kingsoft/Office.conf_used /data/vendor/mslg/rootfs/home/xiaomi/.config/Kingsoft/Office.conf
13 | fi
14 | if [ -e "/data/vendor/mslg/rootfs/home/xiaomi/.config/Kingsoft/WPSCloud.conf_used" ]; then
15 | mv /data/vendor/mslg/rootfs/home/xiaomi/.config/Kingsoft/WPSCloud.conf_used /data/vendor/mslg/rootfs/home/xiaomi/.config/Kingsoft/WPSCloud.conf
16 | fi
17 | 
18 | setprop persist.vendor.unzip.mslgrootfs disable
19 | 


--------------------------------------------------------------------------------
/mslgservice/Android.mk:
--------------------------------------------------------------------------------
 1 | LOCAL_PATH := $(call my-dir)
 2 | 
 3 | include $(CLEAR_VARS)
 4 | LOCAL_MODULE := mslgservice.rc
 5 | LOCAL_MODULE_CLASS := ETC
 6 | LOCAL_MODULE_TAGS := optional
 7 | LOCAL_SRC_FILES := mslgservice.rc
 8 | LOCAL_MODULE_PATH := $(TARGET_OUT_VENDOR_ETC)/init
 9 | include $(BUILD_PREBUILT)
10 | 


--------------------------------------------------------------------------------
/mslgservice/mslgservice.rc:
--------------------------------------------------------------------------------
 1 | on post-fs-data
 2 |     mkdir /data/vendor/mslg 0771 root root
 3 |     mkdir /data/vendor/mslg/rootfs 0771 root root
 4 |     mkdir /data/vendor/mslg/rootfs/tablet 0771 root root
 5 |     mkdir  /dev/msl 0777 root system
 6 |     mkdir  /dev/msl/rdp 0777 root system
 7 |     restorecon /dev/msl/rdp
 8 | 
 9 | on property:sys.boot_completed=1
10 |    stop mslgrootfs
11 |    start mslgservice
12 | 
13 | on property:persist.vendor.unzip.mslgrootfs=enable && property:vendor.mslgrootfs.version=*
14 |     start tar_rootfs 
15 | 
16 | on property:persist.vendor.unzip.mslgrootfs=disable && property:vendor.mslgrootfs.isready=1
17 |     start losetup_rootfs
18 | 
19 | on property:vendor.setup.mslgrootfs=1 && property:sys.boot_completed=1 && property:vendor.mslg.mslgoptimg=* && property:vendor.mslg.mslgusrimg=* && property:sys.mslg.mounted=1
20 |     mount none /dev /data/vendor/mslg/rootfs/dev bind rec
21 |     mount none /sys /data/vendor/mslg/rootfs/sys bind rec
22 |     mount none /proc /data/vendor/mslg/rootfs/proc bind rec
23 |     mount none /dev/msl/rdp /data/vendor/mslg/rootfs/tmp/msl/rdp bind rec
24 |     mount ext4 ${vendor.mslg.mslgoptimg} /data/vendor/mslg/rootfs/opt ro
25 |     mount ext4 ${vendor.mslg.mslgusrimg} /data/vendor/mslg/rootfs/usr ro
26 |     wait /storage/self/primary/Android 0.1
27 |     mount none /storage/self/primary /data/vendor/mslg/rootfs/tablet bind rec
28 |     start mslgrootfs
29 | 
30 | service mslgservice /vendor/bin/hw/mslgservice
31 |     class core
32 |     user root
33 |     seclabel u:r:mslgd:s0
34 |     disabled
35 |     oneshot
36 | 
37 | service tar_rootfs /vendor/bin/tar-rootfs.sh ${vendor.mslgrootfs.version}
38 |     class core
39 |     user root
40 |     seclabel u:r:mslgd:s0
41 |     disabled
42 |     oneshot
43 | 
44 | service losetup_rootfs /vendor/bin/losetup.sh
45 |     class core
46 |     user root
47 |     seclabel u:r:mslgd:s0
48 |     disabled
49 |     oneshot
50 | 
51 | service mslgrootfs /vendor/bin/start-rootfs.sh
52 |     class core
53 |     user root
54 |     seclabel u:r:mslgd:s0
55 |     disabled
56 |     oneshot
57 | 
58 | 


--------------------------------------------------------------------------------
/proprietary-files.txt:
--------------------------------------------------------------------------------
 1 | # Unpinned blobs from yudi-user 14 UKQ1.230804.001 V816.0.2.0.UMHCNXM release-keys
 2 | 
 3 | # Assets
 4 | vendor/etc/assets/md5.txt
 5 | vendor/etc/assets/mslgoptimg
 6 | vendor/etc/assets/mslgusrimg
 7 | vendor/etc/assets/rootfs-23.09.12.tgz
 8 | 
 9 | # MSLgKeeper
10 | vendor/lib64/vendor.xiaomi.mslg.keeper@1.0.so
11 | 
12 | # MSLgRdp
13 | product/app/MSLgRdp/MSLgRdp.apk:vendor/app/MSLgRdp/MSLgRdp.apk
14 | product/app/MSLgRdp/lib/arm64/libcrypto.so:vendor/app/MSLgRdp/lib/arm64/libcrypto.so
15 | product/app/MSLgRdp/lib/arm64/libfreerdp2.so:vendor/app/MSLgRdp/lib/arm64/libfreerdp2.so
16 | product/app/MSLgRdp/lib/arm64/libfreerdp-android.so:vendor/app/MSLgRdp/lib/arm64/libfreerdp-android.so
17 | product/app/MSLgRdp/lib/arm64/libfreerdp-client2.so:vendor/app/MSLgRdp/lib/arm64/libfreerdp-client2.so
18 | product/app/MSLgRdp/lib/arm64/liblinux-ime.so:vendor/app/MSLgRdp/lib/arm64/liblinux-ime.so
19 | product/app/MSLgRdp/lib/arm64/libssl.so:vendor/app/MSLgRdp/lib/arm64/libssl.so
20 | product/app/MSLgRdp/lib/arm64/libwinpr2.so:vendor/app/MSLgRdp/lib/arm64/libwinpr2.so
21 | 
22 | # MSLgService
23 | vendor/bin/hw/mslgservice
24 | 
25 | # WpsLauncher
26 | -product/data-app/WpsLauncher/WpsLauncher.apk:vendor/app/WpsLauncher/WpsLauncher.apk
27 | 


--------------------------------------------------------------------------------
/sepolicy/attributes:
--------------------------------------------------------------------------------
 1 | # Copyright (c) 2023-2024 The Linux Foundation. All rights reserved.
 2 | #
 3 | # Redistribution and use in source and binary forms, with or without
 4 | # modification, are permitted provided that the following conditions are
 5 | # met:
 6 | #     * Redistributions of source code must retain the above copyright
 7 | #       notice, this list of conditions and the following disclaimer.
 8 | #     * Redistributions in binary form must reproduce the above
 9 | #       copyright notice, this list of conditions and the following
10 | #       disclaimer in the documentation and/or other materials provided
11 | #       with the distribution.
12 | #     * Neither the name of The Linux Foundation nor the names of its
13 | #       contributors may be used to endorse or promote products derived
14 | #       from this software without specific prior written permission.
15 | #
16 | # THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
17 | # WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
18 | # MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
19 | # ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
20 | # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
21 | # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
22 | # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
23 | # BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
24 | # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
25 | # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
26 | # IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27 | 
28 | attribute hal_mslgkeeper;
29 | attribute hal_mslgkeeper_server;
30 | attribute hal_mslgkeeper_client;


--------------------------------------------------------------------------------
/sepolicy/file_contexts:
--------------------------------------------------------------------------------
 1 | # Copyright (c) 2023-2024 The Linux Foundation. All rights reserved.
 2 | #
 3 | # Redistribution and use in source and binary forms, with or without
 4 | # modification, are permitted provided that the following conditions are
 5 | # met:
 6 | #     * Redistributions of source code must retain the above copyright
 7 | #       notice, this list of conditions and the following disclaimer.
 8 | #     * Redistributions in binary form must reproduce the above
 9 | #       copyright notice, this list of conditions and the following
10 | #       disclaimer in the documentation and/or other materials provided
11 | #       with the distribution.
12 | #     * Neither the name of The Linux Foundation nor the names of its
13 | #       contributors may be used to endorse or promote products derived
14 | #       from this software without specific prior written permission.
15 | #
16 | # THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
17 | # WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
18 | # MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
19 | # ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
20 | # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
21 | # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
22 | # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
23 | # BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
24 | # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
25 | # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
26 | # IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27 | 
28 | /dev/msl(/.*)?                                                           u:object_r:mslg_rootfs_file:s0
29 | /data/vendor/mslg(/.*)?                                                  u:object_r:mslg_rootfs_file:s0
30 | 
31 | /(vendor|sustem/vendor)/bin/start-rootfs.sh                              u:object_r:mslgd_exec:s0
32 | /(vendor|sustem/vendor)/bin/tar-rootfs.sh                                u:object_r:mslgd_exec:s0
33 | /(vendor|sustem/vendor)/bin/losetup.sh                                   u:object_r:mslgd_exec:s0
34 | /(vendor|sustem/vendor)/bin/hw/mslgservice                               u:object_r:mslgd_exec:s0
35 | 
36 | /(vendor|sustem/vendor)/bin/hw/vendor.xiaomi.mslg.keeper@1.0-service     u:object_r:hal_mslgkeeper_default_exec:s0
37 | 
38 | /(vendor|sustem/vendor)/etc/assets(/.*)?                                 u:object_r:vendor_file:s0
39 | /(vendor|sustem/vendor)/etc/assets/mslgoptimg                            u:object_r:vendor_file:s0
40 | /(vendor|sustem/vendor)/etc/assets/mslgusrimg                            u:object_r:vendor_file:s0
41 | 


--------------------------------------------------------------------------------
/sepolicy/hal_mslgkeeper.te:
--------------------------------------------------------------------------------
 1 | # Copyright (c) 2023-2024 The Linux Foundation. All rights reserved.
 2 | #
 3 | # Redistribution and use in source and binary forms, with or without
 4 | # modification, are permitted provided that the following conditions are
 5 | # met:
 6 | #     * Redistributions of source code must retain the above copyright
 7 | #       notice, this list of conditions and the following disclaimer.
 8 | #     * Redistributions in binary form must reproduce the above
 9 | #       copyright notice, this list of conditions and the following
10 | #       disclaimer in the documentation and/or other materials provided
11 | #       with the distribution.
12 | #     * Neither the name of The Linux Foundation nor the names of its
13 | #       contributors may be used to endorse or promote products derived
14 | #       from this software without specific prior written permission.
15 | #
16 | # THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
17 | # WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
18 | # MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
19 | # ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
20 | # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
21 | # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
22 | # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
23 | # BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
24 | # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
25 | # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
26 | # IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27 | 
28 | type hal_mslgkeeper_hwservice, hwservice_manager_type;
29 | add_hwservice(hal_mslgkeeper_server, hal_mslgkeeper_hwservice)
30 | 
31 | binder_call(hal_mslgkeeper_client, hal_mslgkeeper_server)
32 | binder_call(hal_mslgkeeper_server, hal_mslgkeeper_client)
33 | 
34 | type hal_mslgkeeper_default, domain, hal_mslgkeeper, hal_mslgkeeper_server;
35 | type hal_mslgkeeper_default_exec, exec_type, file_type, vendor_file_type;
36 | hal_server_domain(hal_mslgkeeper_default, hal_mslgkeeper)
37 | hwbinder_use(hal_mslgkeeper_default)
38 | init_daemon_domain(hal_mslgkeeper_default)
39 | 
40 | set_prop(hal_mslgkeeper_default, vendor_mslg_prop)
41 | 
42 | allow hal_mslgkeeper_default mslg_rootfs_file:dir { read getattr open search };
43 | allow hal_mslgkeeper_default mslg_rootfs_file:file { read getattr open };
44 | 


--------------------------------------------------------------------------------
/sepolicy/hwservice_contexts:
--------------------------------------------------------------------------------
 1 | # Copyright (c) 2023-2024 The Linux Foundation. All rights reserved.
 2 | #
 3 | # Redistribution and use in source and binary forms, with or without
 4 | # modification, are permitted provided that the following conditions are
 5 | # met:
 6 | #     * Redistributions of source code must retain the above copyright
 7 | #       notice, this list of conditions and the following disclaimer.
 8 | #     * Redistributions in binary form must reproduce the above
 9 | #       copyright notice, this list of conditions and the following
10 | #       disclaimer in the documentation and/or other materials provided
11 | #       with the distribution.
12 | #     * Neither the name of The Linux Foundation nor the names of its
13 | #       contributors may be used to endorse or promote products derived
14 | #       from this software without specific prior written permission.
15 | #
16 | # THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
17 | # WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
18 | # MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
19 | # ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
20 | # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
21 | # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
22 | # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
23 | # BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
24 | # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
25 | # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
26 | # IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27 | 
28 | vendor.xiaomi.mslg.keeper::IMSLgKeeper       u:object_r:hal_mslgkeeper_hwservice:s0
29 | 


--------------------------------------------------------------------------------
/sepolicy/init.te:
--------------------------------------------------------------------------------
 1 | # Copyright (c) 2023-2024 The Linux Foundation. All rights reserved.
 2 | #
 3 | # Redistribution and use in source and binary forms, with or without
 4 | # modification, are permitted provided that the following conditions are
 5 | # met:
 6 | #     * Redistributions of source code must retain the above copyright
 7 | #       notice, this list of conditions and the following disclaimer.
 8 | #     * Redistributions in binary form must reproduce the above
 9 | #       copyright notice, this list of conditions and the following
10 | #       disclaimer in the documentation and/or other materials provided
11 | #       with the distribution.
12 | #     * Neither the name of The Linux Foundation nor the names of its
13 | #       contributors may be used to endorse or promote products derived
14 | #       from this software without specific prior written permission.
15 | #
16 | # THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
17 | # WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
18 | # MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
19 | # ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
20 | # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
21 | # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
22 | # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
23 | # BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
24 | # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
25 | # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
26 | # IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27 | 
28 | allow init mslg_rootfs_file:{ dir file } mounton;


--------------------------------------------------------------------------------
/sepolicy/mslg_app.te:
--------------------------------------------------------------------------------
  1 | # Copyright (c) 2023-2024 The Linux Foundation. All rights reserved.
  2 | #
  3 | # Redistribution and use in source and binary forms, with or without
  4 | # modification, are permitted provided that the following conditions are
  5 | # met:
  6 | #     * Redistributions of source code must retain the above copyright
  7 | #       notice, this list of conditions and the following disclaimer.
  8 | #     * Redistributions in binary form must reproduce the above
  9 | #       copyright notice, this list of conditions and the following
 10 | #       disclaimer in the documentation and/or other materials provided
 11 | #       with the distribution.
 12 | #     * Neither the name of The Linux Foundation nor the names of its
 13 | #       contributors may be used to endorse or promote products derived
 14 | #       from this software without specific prior written permission.
 15 | #
 16 | # THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
 17 | # WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
 18 | # MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
 19 | # ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
 20 | # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 21 | # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 22 | # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
 23 | # BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
 24 | # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
 25 | # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
 26 | # IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 27 | 
 28 | type mslg_app, domain, socket_between_core_and_vendor_violators;
 29 | typeattribute mslg_app coredomain;
 30 | app_domain(mslg_app);
 31 | bluetooth_domain(mslg_app);
 32 | net_domain(mslg_app);
 33 | 
 34 | can_profile_perf(mslg_app)
 35 | create_pty(mslg_app)
 36 | perfetto_producer(mslg_app)
 37 | binder_call(mslg_app, gpuservice)
 38 | get_prop(mslg_app, vendor_mslg_prop)
 39 | set_prop(mslg_app, system_prop)
 40 | domain_auto_trans(mslg_app, rs_exec, rs)
 41 | 
 42 | allow mslg_app servicemanager:service_manager list;
 43 | allow mslg_app { vendor_hal_perf_hwservice hal_mslgkeeper_hwservice }:hwservice_manager find;
 44 | allow mslg_app {
 45 |  app_api_service
 46 |  audioserver_service
 47 |  cameraserver_service
 48 |  drmserver_service
 49 |  gpu_service
 50 |  mediadrmserver_service
 51 |  mediaextractor_service
 52 |  mediametrics_service
 53 |  mediaserver_service
 54 |  nfc_service radio_service
 55 |  system_app_service
 56 |  vr_manager_service
 57 | }:service_manager find;
 58 | 
 59 | allow mslg_app app_data_file:{ fifo_file lnk_file sock_file } create_file_perms;
 60 | allow mslg_app app_data_file:dir { write add_name search };
 61 | allow mslg_app app_data_file:file { create open };
 62 | auditallow mslg_app app_data_file:file execute;
 63 | allow mslg_app privapp_data_file:lnk_file r_file_perms;
 64 | allow mslg_app trace_data_file:file { read getattr };
 65 | 
 66 | allow mslg_app asec_apk_file:dir r_dir_perms;
 67 | allow mslg_app asec_apk_file:file r_file_perms;
 68 | allow mslg_app asec_public_file:file execute;
 69 | 
 70 | allow mslg_app hal_mslgkeeper_default:binder { call transfer };
 71 | 
 72 | allow mslg_app media_rw_data_file:dir create_dir_perms;
 73 | allow mslg_app media_rw_data_file:file create_file_perms;
 74 | allow mslg_app mnt_media_rw_file:dir search;
 75 | 
 76 | allow mslg_app mslg_app:tcp_socket { read write };
 77 | allow mslg_app mslgd:unix_dgram_socket sendto;
 78 | allow mslg_app mslgd:unix_stream_socket connectto;
 79 | 
 80 | allow mslg_app mslg_rootfs_file:dir { read write create getattr setattr open watch add_name remove_name search rmdir };
 81 | allow mslg_app mslg_rootfs_file:fifo_file { read write create unlink open };
 82 | allow mslg_app mslg_rootfs_file:file { ioctl read write create getattr setattr lock append map unlink link rename open watch };
 83 | allow mslg_app mslg_rootfs_file:lnk_file { read getattr };
 84 | allow mslg_app mslg_rootfs_file:sock_file { write create getattr setattr unlink rename };
 85 | 
 86 | dontaudit mslg_app net_dns_prop:file read;
 87 | 
 88 | allow mslg_app preloads_media_file:dir create_dir_perms;
 89 | allow mslg_app preloads_media_file:dir search;
 90 | allow mslg_app preloads_media_file:file create_file_perms;
 91 | 
 92 | dontaudit mslg_app { proc_stat proc_uptime proc_vmstat }:file read;
 93 | #allow mslg_app procfs_memory:file { read open };
 94 | 
 95 | allow mslg_app simpleperf:process signal;
 96 | allow mslg_app self:process ptrace;
 97 | 
 98 | allow mslg_app runas_app:process sigchld;
 99 | allow mslg_app runas_app:unix_stream_socket connectto;
100 | 
101 | allow mslg_app shell_data_file:dir r_dir_perms;
102 | allow mslg_app shell_data_file:file r_file_perms;
103 | 
104 | allow mslg_app sysfs_hwrandom:dir search;
105 | allow mslg_app sysfs_hwrandom:file r_file_perms;
106 | 
107 | allow mslg_app system_app_data_file:file { read write getattr };
108 | allow mslg_app system_linker_exec:file execute_no_trans;
109 | allow mslg_app system_server:udp_socket { read write getattr connect getopt setopt recvfrom sendto };
110 | 
111 | allow mslg_app tmpfs:file { read open };
112 | allow mslg_app tmpfs:sock_file { write create };
113 | 
114 | allow mslg_app vendor_app_file:dir { read getattr open search };
115 | allow mslg_app vendor_app_file:file r_file_perms;
116 | allow mslg_app vendor_app_file:lnk_file { read getattr open };
117 | 


--------------------------------------------------------------------------------
/sepolicy/mslg_init.te:
--------------------------------------------------------------------------------
 1 | # Copyright (c) 2023-2024 The Linux Foundation. All rights reserved.
 2 | #
 3 | # Redistribution and use in source and binary forms, with or without
 4 | # modification, are permitted provided that the following conditions are
 5 | # met:
 6 | #     * Redistributions of source code must retain the above copyright
 7 | #       notice, this list of conditions and the following disclaimer.
 8 | #     * Redistributions in binary form must reproduce the above
 9 | #       copyright notice, this list of conditions and the following
10 | #       disclaimer in the documentation and/or other materials provided
11 | #       with the distribution.
12 | #     * Neither the name of The Linux Foundation nor the names of its
13 | #       contributors may be used to endorse or promote products derived
14 | #       from this software without specific prior written permission.
15 | #
16 | # THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
17 | # WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
18 | # MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
19 | # ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
20 | # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
21 | # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
22 | # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
23 | # BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
24 | # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
25 | # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
26 | # IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27 | 
28 | type mslg_init, domain;
29 | type mslg_init_exec, file_type, exec_type, vendor_file_type, mlstrustedsubject;
30 | init_daemon_domain(mslg_init)
31 | 


--------------------------------------------------------------------------------
/sepolicy/mslg_rootfs_file.te:
--------------------------------------------------------------------------------
 1 | # Copyright (c) 2023-2024 The Linux Foundation. All rights reserved.
 2 | #
 3 | # Redistribution and use in source and binary forms, with or without
 4 | # modification, are permitted provided that the following conditions are
 5 | # met:
 6 | #     * Redistributions of source code must retain the above copyright
 7 | #       notice, this list of conditions and the following disclaimer.
 8 | #     * Redistributions in binary form must reproduce the above
 9 | #       copyright notice, this list of conditions and the following
10 | #       disclaimer in the documentation and/or other materials provided
11 | #       with the distribution.
12 | #     * Neither the name of The Linux Foundation nor the names of its
13 | #       contributors may be used to endorse or promote products derived
14 | #       from this software without specific prior written permission.
15 | #
16 | # THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
17 | # WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
18 | # MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
19 | # ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
20 | # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
21 | # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
22 | # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
23 | # BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
24 | # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
25 | # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
26 | # IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27 | 
28 | #allow hal_misys_default mslg_rootfs_file:file { read getattr open };
29 | #allow hal_misys_default mslg_rootfs_file:dir { read getattr open search };
30 | 
31 | type mslg_rootfs_file, file_type, data_file_type, mlstrustedobject;


--------------------------------------------------------------------------------
/sepolicy/mslgd.te:
--------------------------------------------------------------------------------
  1 | # Copyright (c) 2023-2024 The Linux Foundation. All rights reserved.
  2 | #
  3 | # Redistribution and use in source and binary forms, with or without
  4 | # modification, are permitted provided that the following conditions are
  5 | # met:
  6 | #     * Redistributions of source code must retain the above copyright
  7 | #       notice, this list of conditions and the following disclaimer.
  8 | #     * Redistributions in binary form must reproduce the above
  9 | #       copyright notice, this list of conditions and the following
 10 | #       disclaimer in the documentation and/or other materials provided
 11 | #       with the distribution.
 12 | #     * Neither the name of The Linux Foundation nor the names of its
 13 | #       contributors may be used to endorse or promote products derived
 14 | #       from this software without specific prior written permission.
 15 | #
 16 | # THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
 17 | # WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
 18 | # MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
 19 | # ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
 20 | # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 21 | # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 22 | # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
 23 | # BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
 24 | # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
 25 | # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
 26 | # IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 27 | 
 28 | type mslgd, domain, mlstrustedsubject, socket_between_core_and_vendor_violators;
 29 | type mslgd_exec, exec_type, file_type, vendor_file_type;
 30 | init_daemon_domain(mslgd)
 31 | 
 32 | set_prop(mslgd, vendor_mslg_prop)
 33 | 
 34 | get_prop(mslgd, hwservicemanager_prop)
 35 | allow hwservicemanager mslgd:binder transfer;
 36 | 
 37 | allow mslgd hwservicemanager:binder call;
 38 | allow mslgd hal_mslgkeeper_default:binder call;
 39 | 
 40 | allow mslgd hal_mslgkeeper_hwservice:hwservice_manager find;
 41 | 
 42 | allow mslgd { hal_graphics_composer_default platform_app priv_app system_app untrusted_app }:process signull;
 43 | 
 44 | allow mslgd block_device:dir r_dir_perms;
 45 | allow mslgd loop_control_device:chr_file { ioctl read write open };
 46 | allow mslgd loop_device:blk_file rw_file_perms;
 47 | allowxperm mslgd loop_device:blk_file ioctl BLKFLSBUF;
 48 | allowxperm mslgd loop_device:blk_file ioctl {
 49 |  LOOP_SET_FD
 50 |  LOOP_CLR_FD
 51 |  LOOP_SET_STATUS64
 52 |  LOOP_GET_STATUS64
 53 |  LOOP_SET_DIRECT_IO
 54 |  LOOP_CONFIGURE
 55 | };
 56 | 
 57 | allow mslgd devpts:chr_file { ioctl read write getattr setattr append open };
 58 | allow mslgd devpts:dir { read open };
 59 | 
 60 | allow mslgd fuse:dir create_dir_perms;
 61 | allow mslgd fuse:file create_file_perms;
 62 | 
 63 | allow mslgd init:dir search;
 64 | allow mslgd init:file { read getattr open };
 65 | allow mslgd init:lnk_file read;
 66 | 
 67 | allow kernel mslgd:fd use;
 68 | allow mslgd kernel:dir search;
 69 | allow mslgd kernel:file { read open };
 70 | allow mslgd kernel:file getattr;
 71 | allow mslgd kernel:key link;
 72 | allow mslgd kernel:lnk_file read;
 73 | 
 74 | allow mslgd mslg_app:unix_dgram_socket sendto;
 75 | 
 76 | allow mslgd mslg_rootfs_file:dir { read write create getattr setattr rename open watch add_name remove_name search rmdir };
 77 | allow mslgd mslg_rootfs_file:fifo_file { read write create unlink open };
 78 | allow mslgd mslg_rootfs_file:file { ioctl read write create getattr setattr lock append map unlink link rename open watch };
 79 | allow mslgd mslg_rootfs_file:lnk_file { read create getattr setattr link };
 80 | allow mslgd mslg_rootfs_file:sock_file { write create getattr setattr unlink rename };
 81 | 
 82 | allow mslgd mslgd_exec:dir { read getattr add_name remove_name search };
 83 | allow mslgd mslgd_exec:file { ioctl read getattr lock map execute open execute_no_trans entrypoint };
 84 | allow mslgd mslgd_exec:lnk_file { read getattr };
 85 | 
 86 | allow mslgd mslgd:capability { chown fowner fsetid kill setgid setuid setpcap sys_chroot sys_admin sys_nice sys_resource audit_write };
 87 | allow mslgd mslgd:key { write search };
 88 | allow mslgd mslgd:netlink_audit_socket { read write create nlmsg_relay };
 89 | allow mslgd mslgd:netlink_kobject_uevent_socket { create getattr bind setopt };
 90 | allow mslgd mslgd:netlink_route_socket { read write create getattr bind setopt nlmsg_read nlmsg_readpriv };
 91 | allow mslgd mslgd:process { setexec execmem };
 92 | allow mslgd mslgd:tcp_socket { ioctl shutdown };
 93 | allow mslgd mslgd:tcp_socket { read write create bind connect listen accept setopt name_connect };
 94 | allow mslgd mslgd:udp_socket { read write create getattr connect setopt };
 95 | allow mslgd node:tcp_socket node_bind;
 96 | allow mslgd port:tcp_socket { name_bind name_connect };
 97 | 
 98 | allow mslgd proc_filesystems:file { read getattr open };
 99 | allow mslgd proc:file r_file_perms;
100 | 
101 | allow mslgd su:fd use;
102 | allow mslgd su:process { transition noatsecure siginh rlimitinh };
103 | allow mslgd su:unix_stream_socket { accept setopt };
104 | 
105 | allow mslgd sysfs:dir read;
106 | allow mslgd tmpfs:chr_file { ioctl read write getattr setattr open };
107 | allow mslgd tmpfs:dir create_dir_perms;
108 | allow mslgd tmpfs:file create_file_perms;
109 | allow mslgd tmpfs:lnk_file read;
110 | 
111 | allow mslgd untrusted_app_30:unix_dgram_socket sendto;
112 | 
113 | allow mslgd vendor_file:file read;
114 | allow mslgd vendor_init:dir search;
115 | allow mslgd vendor_init:file { read open };
116 | allow mslgd vendor_toolbox_exec:file execute_no_trans;


--------------------------------------------------------------------------------
/sepolicy/platform_app.te:
--------------------------------------------------------------------------------
 1 | # Copyright (c) 2023-2024 The Linux Foundation. All rights reserved.
 2 | #
 3 | # Redistribution and use in source and binary forms, with or without
 4 | # modification, are permitted provided that the following conditions are
 5 | # met:
 6 | #     * Redistributions of source code must retain the above copyright
 7 | #       notice, this list of conditions and the following disclaimer.
 8 | #     * Redistributions in binary form must reproduce the above
 9 | #       copyright notice, this list of conditions and the following
10 | #       disclaimer in the documentation and/or other materials provided
11 | #       with the distribution.
12 | #     * Neither the name of The Linux Foundation nor the names of its
13 | #       contributors may be used to endorse or promote products derived
14 | #       from this software without specific prior written permission.
15 | #
16 | # THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
17 | # WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
18 | # MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
19 | # ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
20 | # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
21 | # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
22 | # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
23 | # BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
24 | # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
25 | # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
26 | # IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27 | 
28 | allow platform_app hal_mslgkeeper_default:binder { call transfer };
29 | allow platform_app hal_mslgkeeper_hwservice:hwservice_manager find;
30 | 
31 | allow platform_app mslg_rootfs_file:dir r_dir_perms;
32 | allow platform_app mslg_rootfs_file:file r_file_perms;
33 | allow platform_app mslg_rootfs_file:sock_file write;
34 | 


--------------------------------------------------------------------------------
/sepolicy/property.te:
--------------------------------------------------------------------------------
 1 | # Copyright (c) 2023-2024 The Linux Foundation. All rights reserved.
 2 | #
 3 | # Redistribution and use in source and binary forms, with or without
 4 | # modification, are permitted provided that the following conditions are
 5 | # met:
 6 | #     * Redistributions of source code must retain the above copyright
 7 | #       notice, this list of conditions and the following disclaimer.
 8 | #     * Redistributions in binary form must reproduce the above
 9 | #       copyright notice, this list of conditions and the following
10 | #       disclaimer in the documentation and/or other materials provided
11 | #       with the distribution.
12 | #     * Neither the name of The Linux Foundation nor the names of its
13 | #       contributors may be used to endorse or promote products derived
14 | #       from this software without specific prior written permission.
15 | #
16 | # THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
17 | # WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
18 | # MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
19 | # ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
20 | # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
21 | # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
22 | # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
23 | # BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
24 | # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
25 | # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
26 | # IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27 | 
28 | vendor_public_prop(vendor_mslg_prop)


--------------------------------------------------------------------------------
/sepolicy/property_contexts:
--------------------------------------------------------------------------------
1 | persist.vendor.unzip.mslgrootfs    u:object_r:vendor_mslg_prop:s0
2 | vendor.mslgrootfs.isready          u:object_r:vendor_mslg_prop:s0
3 | vendor.mslgrootfs.version          u:object_r:vendor_mslg_prop:s0
4 | vendor.setup.mslgrootfs            u:object_r:vendor_mslg_prop:s0
5 | vendor.mslg.mslgusrimg             u:object_r:vendor_mslg_prop:s0
6 | vendor.mslg.mslgoptimg             u:object_r:vendor_mslg_prop:s0
7 | ro.vendor.mslg.rootfs.version      u:object_r:vendor_mslg_prop:s0
8 | 


--------------------------------------------------------------------------------
/sepolicy/seapp_contexts:
--------------------------------------------------------------------------------
 1 | # Copyright (c) 2023-2024 The Linux Foundation. All rights reserved.
 2 | #
 3 | # Redistribution and use in source and binary forms, with or without
 4 | # modification, are permitted provided that the following conditions are
 5 | # met:
 6 | #     * Redistributions of source code must retain the above copyright
 7 | #       notice, this list of conditions and the following disclaimer.
 8 | #     * Redistributions in binary form must reproduce the above
 9 | #       copyright notice, this list of conditions and the following
10 | #       disclaimer in the documentation and/or other materials provided
11 | #       with the distribution.
12 | #     * Neither the name of The Linux Foundation nor the names of its
13 | #       contributors may be used to endorse or promote products derived
14 | #       from this software without specific prior written permission.
15 | #
16 | # THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
17 | # WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
18 | # MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
19 | # ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
20 | # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
21 | # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
22 | # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
23 | # BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
24 | # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
25 | # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
26 | # IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27 | 
28 | # MSLgRdp
29 | user=_app seinfo=mslg_app name=com.xiaomi.mslgrdp domain=mslg_app type=app_data_file levelFrom=all
30 | 
31 | # WpsLauncher
32 | user=_app seinfo=mslg_app name=com.xiaomi.wpslauncher domain=mslg_app type=app_data_file levelFrom=all


--------------------------------------------------------------------------------
/sepolicy/system_app.te:
--------------------------------------------------------------------------------
 1 | # Copyright (c) 2023-2024 The Linux Foundation. All rights reserved.
 2 | #
 3 | # Redistribution and use in source and binary forms, with or without
 4 | # modification, are permitted provided that the following conditions are
 5 | # met:
 6 | #     * Redistributions of source code must retain the above copyright
 7 | #       notice, this list of conditions and the following disclaimer.
 8 | #     * Redistributions in binary form must reproduce the above
 9 | #       copyright notice, this list of conditions and the following
10 | #       disclaimer in the documentation and/or other materials provided
11 | #       with the distribution.
12 | #     * Neither the name of The Linux Foundation nor the names of its
13 | #       contributors may be used to endorse or promote products derived
14 | #       from this software without specific prior written permission.
15 | #
16 | # THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
17 | # WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
18 | # MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
19 | # ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
20 | # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
21 | # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
22 | # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
23 | # BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
24 | # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
25 | # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
26 | # IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27 | 
28 | allow system_app hal_mslgkeeper_default:binder call;
29 | allow system_app hal_mslgkeeper_hwservice:hwservice_manager find;


--------------------------------------------------------------------------------
/sepolicy/system_server.te:
--------------------------------------------------------------------------------
 1 | # Copyright (c) 2023-2024 The Linux Foundation. All rights reserved.
 2 | #
 3 | # Redistribution and use in source and binary forms, with or without
 4 | # modification, are permitted provided that the following conditions are
 5 | # met:
 6 | #     * Redistributions of source code must retain the above copyright
 7 | #       notice, this list of conditions and the following disclaimer.
 8 | #     * Redistributions in binary form must reproduce the above
 9 | #       copyright notice, this list of conditions and the following
10 | #       disclaimer in the documentation and/or other materials provided
11 | #       with the distribution.
12 | #     * Neither the name of The Linux Foundation nor the names of its
13 | #       contributors may be used to endorse or promote products derived
14 | #       from this software without specific prior written permission.
15 | #
16 | # THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
17 | # WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
18 | # MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
19 | # ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
20 | # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
21 | # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
22 | # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
23 | # BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
24 | # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
25 | # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
26 | # IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27 | 
28 | allow system_server hal_mslgkeeper_default:binder call;
29 | allow system_server hal_mslgkeeper_hwservice:hwservice_manager find;


--------------------------------------------------------------------------------
/sepolicy/untrusted_app_30.te:
--------------------------------------------------------------------------------
 1 | # Copyright (c) 2023-2024 The Linux Foundation. All rights reserved.
 2 | #
 3 | # Redistribution and use in source and binary forms, with or without
 4 | # modification, are permitted provided that the following conditions are
 5 | # met:
 6 | #     * Redistributions of source code must retain the above copyright
 7 | #       notice, this list of conditions and the following disclaimer.
 8 | #     * Redistributions in binary form must reproduce the above
 9 | #       copyright notice, this list of conditions and the following
10 | #       disclaimer in the documentation and/or other materials provided
11 | #       with the distribution.
12 | #     * Neither the name of The Linux Foundation nor the names of its
13 | #       contributors may be used to endorse or promote products derived
14 | #       from this software without specific prior written permission.
15 | #
16 | # THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
17 | # WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
18 | # MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
19 | # ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
20 | # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
21 | # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
22 | # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
23 | # BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
24 | # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
25 | # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
26 | # IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27 | 
28 | #type untrusted_app_30, domain;
29 | 
30 | #allow untrusted_app_30 mslg_rootfs_file:dir { ioctl read write getattr lock open watch watch_reads add_name remove_name search };
31 | #allow untrusted_app_30 mslg_rootfs_file:file { ioctl read write getattr lock append map open watch watch_reads };
32 | #allow untrusted_app_30 mslg_rootfs_file:sock_file { write create getattr setattr unlink rename };
33 | 
34 | allow untrusted_app_30 mslgd:unix_dgram_socket sendto;
35 | allow untrusted_app_30 mslgd:unix_stream_socket connectto;


--------------------------------------------------------------------------------
/sepolicy/vendor_init.te:
--------------------------------------------------------------------------------
 1 | # Copyright (c) 2023-2024 The Linux Foundation. All rights reserved.
 2 | #
 3 | # Redistribution and use in source and binary forms, with or without
 4 | # modification, are permitted provided that the following conditions are
 5 | # met:
 6 | #     * Redistributions of source code must retain the above copyright
 7 | #       notice, this list of conditions and the following disclaimer.
 8 | #     * Redistributions in binary form must reproduce the above
 9 | #       copyright notice, this list of conditions and the following
10 | #       disclaimer in the documentation and/or other materials provided
11 | #       with the distribution.
12 | #     * Neither the name of The Linux Foundation nor the names of its
13 | #       contributors may be used to endorse or promote products derived
14 | #       from this software without specific prior written permission.
15 | #
16 | # THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
17 | # WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
18 | # MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
19 | # ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
20 | # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
21 | # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
22 | # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
23 | # BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
24 | # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
25 | # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
26 | # IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27 | 
28 | set_prop(vendor_init, vendor_mslg_prop)


--------------------------------------------------------------------------------
/setup-makefiles.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/bash
 2 | #
 3 | # Copyright (C) 2016 The CyanogenMod Project
 4 | # Copyright (C) 2017-2020 The LineageOS Project
 5 | #
 6 | # SPDX-License-Identifier: Apache-2.0
 7 | #
 8 | 
 9 | set -e
10 | 
11 | DEVICE=wps
12 | VENDOR=xiaomi
13 | 
14 | # Load extract_utils and do some sanity checks
15 | MY_DIR="${BASH_SOURCE%/*}"
16 | if [[ ! -d "${MY_DIR}" ]]; then MY_DIR="${PWD}"; fi
17 | 
18 | ANDROID_ROOT="${MY_DIR}/../../.."
19 | 
20 | HELPER="${ANDROID_ROOT}/tools/extract-utils/extract_utils.sh"
21 | if [ ! -f "${HELPER}" ]; then
22 |     echo "Unable to find helper script at ${HELPER}"
23 |     exit 1
24 | fi
25 | source "${HELPER}"
26 | 
27 | # Initialize the helper
28 | setup_vendor "${DEVICE}" "${VENDOR}" "${ANDROID_ROOT}"
29 | 
30 | # Warning headers and guards
31 | write_headers
32 | 
33 | write_makefiles "${MY_DIR}/proprietary-files.txt" true
34 | 
35 | # Finish
36 | write_footers
37 | 


--------------------------------------------------------------------------------