From b9c35b349e08dc936b2a082527c1bf366c0243da Mon Sep 17 00:00:00 2001
From: renwei <renwei8@huawei.com>
Date: Fri, 6 May 2022 12:29:24 +0800
Subject: [PATCH] add secon cfg

Signed-off-by: renwei <renwei8@huawei.com>
Change-Id: Ic06909b0a6a173393324dcf3071584ed9738cb98
---
 device_info/etc/deviceinfoservice.cfg        | 3 ++-
 services/etc/console.cfg                     | 3 ++-
 services/etc/init.usb.cfg                    | 1 +
 services/etc/misc.cfg                        | 3 ++-
 services/etc/ueventd.cfg                     | 3 ++-
 services/etc/watchdog.cfg                    | 3 ++-
 services/param/watcher/etc/param_watcher.cfg | 3 ++-
 7 files changed, 13 insertions(+), 6 deletions(-)

diff --git a/device_info/etc/deviceinfoservice.cfg b/device_info/etc/deviceinfoservice.cfg
index 38c82985..29a985c0 100755
--- a/device_info/etc/deviceinfoservice.cfg
+++ b/device_info/etc/deviceinfoservice.cfg
@@ -17,7 +17,8 @@
             "gid" : ["system", "shell"],
             "jobs" : {
                 "on-start" : "services:deviceinfoservice"
-            }
+            },
+            "secon" : "u:r:deviceinfoservice:s0"
         }
     ]
 }
\ No newline at end of file
diff --git a/services/etc/console.cfg b/services/etc/console.cfg
index 368daf87..5df3b774 100644
--- a/services/etc/console.cfg
+++ b/services/etc/console.cfg
@@ -10,7 +10,8 @@
             "gid" : ["shell", "log", "readproc"],
             "jobs" : {
                 "on-start" : "services:console"
-            }
+            },
+            "secon" : "u:r:console:s0"
         }
     ]
 }
diff --git a/services/etc/init.usb.cfg b/services/etc/init.usb.cfg
index 885635b7..24e93fc1 100755
--- a/services/etc/init.usb.cfg
+++ b/services/etc/init.usb.cfg
@@ -30,6 +30,7 @@
             }],
             "sandbox" : 0,
             "start-mode" : "condition",
+            "secon" : "u:r:hdcd:s0",
             "disabled" : 1
         }
     ]
diff --git a/services/etc/misc.cfg b/services/etc/misc.cfg
index f429f2f2..de4f2b36 100644
--- a/services/etc/misc.cfg
+++ b/services/etc/misc.cfg
@@ -2,7 +2,8 @@
     "services" : [{
             "name" : "misc",
             "path" : ["/system/bin/misc_daemon", "--write_logo", "/vendor/logo.rgb"],
-            "once" : 1
+            "once" : 1,
+            "secon" : "u:r:misc:s0"
         }
     ]
 }
diff --git a/services/etc/ueventd.cfg b/services/etc/ueventd.cfg
index 171cb543..11bef09e 100644
--- a/services/etc/ueventd.cfg
+++ b/services/etc/ueventd.cfg
@@ -20,7 +20,8 @@
             "critical" : [ 0, 15, 5],
             "ondemand" : true,
             "sandbox" : 0,
-            "start-mode" : "condition"
+            "start-mode" : "condition",
+            "secon" : "u:r:ueventd:s0"
         }
     ]
 }
diff --git a/services/etc/watchdog.cfg b/services/etc/watchdog.cfg
index 9adfd8a8..8b975e00 100644
--- a/services/etc/watchdog.cfg
+++ b/services/etc/watchdog.cfg
@@ -6,7 +6,8 @@
             "disabled" : 1,
             "sandbox" : 0,
             "uid" : "root",
-            "gid" : ["shell", "log", "readproc"]
+            "gid" : ["shell", "log", "readproc"],
+            "secon" : "u:r:watchdog_service:s0"
         }
     ]
 }
diff --git a/services/param/watcher/etc/param_watcher.cfg b/services/param/watcher/etc/param_watcher.cfg
index 3b6b821e..93a68583 100755
--- a/services/param/watcher/etc/param_watcher.cfg
+++ b/services/param/watcher/etc/param_watcher.cfg
@@ -4,7 +4,8 @@
             "path" : ["/system/bin/sa_main", "/system/profile/param_watcher.xml"],
             "uid" : "system",
             "start-mode" : "boot",
-            "gid" : ["system", "shell"]
+            "gid" : ["system", "shell"],
+            "secon" : "u:r:param_watcher:s0"
         }
     ]
 }
-- 
GitLab