b1f434c446
Move vendor policy to vendor and add a place for system extensions. Also add such an extension: a labeling of the qti.ims.ext service. Bug: 38151691 Bug: 62041272 Test: Policy binary identical before and after, except plat_service_contexts has new service added. Change-Id: Ie4e8527649787dcf2391b326daa80cf1c9bd9d2f Change-Id: I1493c4c8876c4446a1de46b39942098bf49c79f8
39 lines
1.7 KiB
Text
39 lines
1.7 KiB
Text
type hal_fingerprint_wayne, domain, binder_in_vendor_violators;
|
|
hal_server_domain(hal_fingerprint_wayne, hal_fingerprint)
|
|
|
|
type hal_fingerprint_wayne_exec, exec_type, vendor_file_type, file_type;
|
|
typeattribute hal_fingerprint_wayne data_between_core_and_vendor_violators;
|
|
binder_use(hal_fingerprint_wayne)
|
|
init_daemon_domain(hal_fingerprint_wayne)
|
|
|
|
allow hal_fingerprint_wayne fingerprint_device:chr_file { read write open ioctl };
|
|
allow hal_fingerprint_wayne { tee_device uhid_device }:chr_file { read write open ioctl };
|
|
allow hal_fingerprint_wayne fingerprint_data_file:file rw_file_perms;
|
|
allow hal_fingerprint_wayne fingerprintd_data_file:dir rw_dir_perms;
|
|
allow hal_fingerprint_wayne fingerprintd_data_file:file create_file_perms;
|
|
allow hal_fingerprint_wayne { fuse mnt_user_file storage_file }:dir search;
|
|
allow hal_fingerprint_wayne { mnt_user_file storage_file }:lnk_file read;
|
|
allow hal_fingerprint_wayne fingerprint_sysfs:dir r_dir_perms;
|
|
allow hal_fingerprint_wayne fingerprint_sysfs:file rw_file_perms;
|
|
|
|
allow hal_fingerprint_wayne hal_fingerprint_wayne:netlink_socket { create bind write read };
|
|
|
|
binder_call(hal_fingerprint_wayne, vndservicemanager)
|
|
binder_call(hal_fingerprint_wayne, hal_perf_default)
|
|
|
|
binder_use(hal_fingerprint_wayne)
|
|
|
|
r_dir_file(hal_fingerprint_wayne, firmware_file)
|
|
|
|
add_service(hal_fingerprint_wayne, goodixvnd_service)
|
|
add_hwservice(hal_fingerprint_wayne, goodixhw_service)
|
|
|
|
allow hal_fingerprint_wayne vndbinder_device:chr_file ioctl;
|
|
|
|
get_prop(hal_fingerprint_wayne, hal_fingerprint_prop)
|
|
set_prop(hal_fingerprint_wayne, hal_fingerprint_prop)
|
|
|
|
vndbinder_use(hal_fingerprint_wayne)
|
|
|
|
dontaudit hal_fingerprint_wayne { media_rw_data_file sdcardfs}:dir search;
|
|
dontaudit hal_fingerprint_wayne media_rw_data_file:dir { read open };
|