From ee799114a6c20515d14f98b9898d6def28a41054 Mon Sep 17 00:00:00 2001 From: chengjinsong2 Date: Fri, 9 Jun 2023 20:55:57 +0800 Subject: [PATCH 1/3] feat:modify the system sandbox Signed-off-by: chengjinsong2 --- services/sandbox/system-sandbox.json | 38 +++++++++++++++++++++++----- 1 file changed, 31 insertions(+), 7 deletions(-) diff --git a/services/sandbox/system-sandbox.json b/services/sandbox/system-sandbox.json index be331edfa..b6f9a076a 100644 --- a/services/sandbox/system-sandbox.json +++ b/services/sandbox/system-sandbox.json @@ -32,8 +32,8 @@ "sandbox-flags" : [ "bind", "rec", "private" ], "ignore": 1 }, { - "src-path" : "/vendor", - "sandbox-path" : "/vendor", + "src-path" : "/vendor/lib/chipsetsdk", + "sandbox-path" : "/vendor/lib/chipsetsdk", "sandbox-flags" : [ "bind", "rec", "private" ] }, { "src-path" : "/dev", @@ -74,17 +74,41 @@ "sandbox-path" : "/sys_prod", "sandbox-flags" : [ "bind", "rec", "private" ] }, { - "src-path" : "/vendor", - "sandbox-path" : "/chipset", + "src-path" : "/vendor/etc/firmware", + "sandbox-path" : "/vendor/etc/firmware", "sandbox-flags" : [ "bind", "rec", "private" ] }, { - "src-path" : "/chip_prod", - "sandbox-path" : "/chip_prod", + "src-path" : "/vendor/etc/audio", + "sandbox-path" : "/vendor/etc/audio", "sandbox-flags" : [ "bind", "rec", "private" ] } ], "mount-bind-files" : [{ - }], + "src-path" : "/vendor/lib/libmapper_service_1.0.z.so", + "sandbox-path" : "/vendor/lib/libmapper_service_1.0.z.so", + "sandbox-flags" : [ "bind", "rec", "private" ] + }, { + "src-path" : "/vendor/lib/libinput_interfaces_service_1.0.z.so", + "sandbox-path" : "/vendor/lib/libinput_interfaces_service_1.0.z.so", + "sandbox-flags" : [ "bind", "rec", "private" ] + }, { + "src-path" : "/vendor/lib/chipset-sdk/libhdi_input.z.so", + "sandbox-path" : "/vendor/lib/chipset-sdk/libhdi_input.z.so", + "sandbox-flags" : [ "bind", "rec", "private" ] + }, { + "src-path" : "/vendor/lib/libhdf_utils.z.so", + "sandbox-path" : "/vendor/lib/libhdf_utils.z.so", + "sandbox-flags" : [ "bind", "rec", "private" ] + }, { + "src-path" : "/vendor/lib/libdisplay_buffer_vdi_impl.z.so", + "sandbox-path" : "/vendor/lib/libdisplay_buffer_vdi_impl.z.so", + "sandbox-flags" : [ "bind", "rec", "private" ] + }, { + "src-path" : "/vendor/lib/libdisplay_buffer_vendor.z.so", + "sandbox-path" : "/vendor/lib/libdisplay_buffer_vendor.z.so", + "sandbox-flags" : [ "bind", "rec", "private" ] + } + ], "symbol-links" : [{ "target-name" : "/system/lib", "link-name" : "/lib" -- Gitee From f62907392cf82fdef16244b23aaace1f7603e1e7 Mon Sep 17 00:00:00 2001 From: chengjinsong2 Date: Mon, 12 Jun 2023 11:30:03 +0800 Subject: [PATCH 2/3] feat:modify the system sandbox Signed-off-by: chengjinsong2 --- services/sandbox/system-sandbox.json | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/services/sandbox/system-sandbox.json b/services/sandbox/system-sandbox.json index b6f9a076a..b9c85fb64 100644 --- a/services/sandbox/system-sandbox.json +++ b/services/sandbox/system-sandbox.json @@ -107,6 +107,10 @@ "src-path" : "/vendor/lib/libdisplay_buffer_vendor.z.so", "sandbox-path" : "/vendor/lib/libdisplay_buffer_vendor.z.so", "sandbox-flags" : [ "bind", "rec", "private" ] + }, { + "src-path" : "/vendor/lib/libcodec_hdi_omx_callback_type_service_impl.z.so", + "sandbox-path" : "/vendor/lib/libcodec_hdi_omx_callback_type_service_impl.z.so", + "sandbox-flags" : [ "bind", "rec", "private" ] } ], "symbol-links" : [{ -- Gitee From f36b0858917b16a60bf8a39ff073483bcdff659f Mon Sep 17 00:00:00 2001 From: cheng_jinsong Date: Tue, 13 Jun 2023 09:40:43 +0000 Subject: [PATCH 3/3] update services/sandbox/system-sandbox.json. Signed-off-by: cheng_jinsong --- services/sandbox/system-sandbox.json | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/services/sandbox/system-sandbox.json b/services/sandbox/system-sandbox.json index b9c85fb64..df91c1496 100644 --- a/services/sandbox/system-sandbox.json +++ b/services/sandbox/system-sandbox.json @@ -35,6 +35,10 @@ "src-path" : "/vendor/lib/chipsetsdk", "sandbox-path" : "/vendor/lib/chipsetsdk", "sandbox-flags" : [ "bind", "rec", "private" ] + }, { + "src-path" : "/vendor/lib/chipset-sdk", + "sandbox-path" : "/vendor/lib/chipset-sdk", + "sandbox-flags" : [ "bind", "rec", "private" ] }, { "src-path" : "/dev", "sandbox-path" : "/dev", @@ -91,10 +95,6 @@ "src-path" : "/vendor/lib/libinput_interfaces_service_1.0.z.so", "sandbox-path" : "/vendor/lib/libinput_interfaces_service_1.0.z.so", "sandbox-flags" : [ "bind", "rec", "private" ] - }, { - "src-path" : "/vendor/lib/chipset-sdk/libhdi_input.z.so", - "sandbox-path" : "/vendor/lib/chipset-sdk/libhdi_input.z.so", - "sandbox-flags" : [ "bind", "rec", "private" ] }, { "src-path" : "/vendor/lib/libhdf_utils.z.so", "sandbox-path" : "/vendor/lib/libhdf_utils.z.so", -- Gitee