sdm660: Add folio_daemon in sepolicy

This commit is contained in:
Jeff Vander Stoep 2019-10-19 12:31:12 +02:00 committed by Max Weffers
parent 21e2243476
commit 494ee17d12
No known key found for this signature in database
GPG key ID: 795F73D22FB93FAE
2 changed files with 18 additions and 2 deletions

View file

@ -1,4 +1,19 @@
type folio_daemon, domain;
type folio_daemon_exec, exec_type, file_type;
type folio_daemon, domain;
type folio_daemon_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(folio_daemon) init_daemon_domain(folio_daemon)
allow folio_daemon binder_device:chr_file rw_file_perms;
allow folio_daemon uhid_device:chr_file rw_file_perms;
# TODO(b/35870313): Remove this attribute when the corresponding bug is fixed and the treble
# violations are handled
typeattribute folio_daemon binder_in_vendor_violators;
typeattribute folio_daemon socket_between_core_and_vendor_violators;
allow folio_daemon system_server:unix_stream_socket rw_socket_perms_no_ioctl;
binder_use(folio_daemon)
binder_call(folio_daemon, system_server)
allow folio_daemon sensorservice_service:service_manager find;
allow folio_daemon permission_service:service_manager find;

View file

@ -6,3 +6,4 @@ allow system_server vendor_camera_prop:file { getattr open read };
allow system_server vendor_default_prop:file { getattr open read }; allow system_server vendor_default_prop:file { getattr open read };
allow system_server thermal_service:service_manager find; allow system_server thermal_service:service_manager find;
allow system_server sysfs_battery_supply:file { getattr open read write }; allow system_server sysfs_battery_supply:file { getattr open read write };
binder_call(system_server, folio_daemon)