device_lenovo_sdm710-common/sepolicy/private/hal_light_sdm710.te
LuK1337 172e69cd0d sdm710-common: Make SELinux great again!
Change-Id: Id479e031b584b24f79377aa244add20903a42b02
Signed-off-by: SamarV-121 <samarvispute121@gmail.com>
2019-10-12 09:41:10 +00:00

20 lines
880 B
Text

type hal_light_sdm710, coredomain, domain;
# Allow a base set of permissions required for a domain to offer a
# HAL implementation of the specified type over HwBinder.
typeattribute hal_light_sdm710 halserverdomain;
typeattribute hal_light_sdm710 hal_light_server;
# HwBinder IPC from client to server, and callbacks
binder_call(hal_light_client, hal_light_server)
binder_call(hal_light_server, hal_light_client)
add_hwservice(hal_light_server, hal_light_hwservice)
allow hal_light_client hal_light_hwservice:hwservice_manager find;
type hal_light_sdm710_exec, system_file_type, exec_type, file_type;
init_daemon_domain(hal_light_sdm710)
allow hal_light_sdm710 { sysfs_graphics sysfs_white_led }:lnk_file read;
allow hal_light_sdm710 { sysfs_graphics sysfs_white_led }:file rw_file_perms;
allow hal_light_sdm710 { sysfs_graphics sysfs_leds sysfs_white_led }:dir r_dir_perms;