diff --git a/sepolicy/vendor/folio_daemon.te b/sepolicy/vendor/folio_daemon.te index a4d5444..6bd6946 100644 --- a/sepolicy/vendor/folio_daemon.te +++ b/sepolicy/vendor/folio_daemon.te @@ -1,4 +1,19 @@ -type folio_daemon, domain; -type folio_daemon_exec, exec_type, file_type; +type folio_daemon, domain; +type folio_daemon_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(folio_daemon) + +allow folio_daemon binder_device:chr_file rw_file_perms; +allow folio_daemon uhid_device:chr_file rw_file_perms; + +# TODO(b/35870313): Remove this attribute when the corresponding bug is fixed and the treble +# violations are handled +typeattribute folio_daemon binder_in_vendor_violators; +typeattribute folio_daemon socket_between_core_and_vendor_violators; +allow folio_daemon system_server:unix_stream_socket rw_socket_perms_no_ioctl; + +binder_use(folio_daemon) +binder_call(folio_daemon, system_server) + +allow folio_daemon sensorservice_service:service_manager find; +allow folio_daemon permission_service:service_manager find; diff --git a/sepolicy/vendor/system_server.te b/sepolicy/vendor/system_server.te new file mode 100644 index 0000000..389fee0 --- /dev/null +++ b/sepolicy/vendor/system_server.te @@ -0,0 +1 @@ +binder_call(system_server, folio_daemon)