PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "Add rules for Lights AIDL HAL"

Browse Source 
am: 0545b44e40

Change-Id: I71e5765f17b519a16193c8d0209b61dcb8f63144
This commit is contained in:
Ivailo Karamanolev 2020-01-22 13:39:26 -08:00 committed by android-build-merger
commit 7ad4e6350f
6 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
private/blank_screen.te
View File

@ -4,3 +4,5 @@ type blank_screen_exec, exec_type, file_type, system_file_type;
init_daemon_domain(blank_screen)
hal_client_domain(blank_screen, hal_light)
allow blank_screen hal_light_service:service_manager find;

2
private/compat/29.0/29.0.ignore.cil
View File

@ -37,6 +37,7 @@
hal_can_bus_hwservice
hal_can_controller_hwservice
hal_identity_hwservice
hal_light_service
hal_power_service
hal_rebootescrow_service
hal_tv_tuner_hwservice
@ -55,6 +56,7 @@
mediatranscoding_exec
mediatranscoding_tmpfs
mirror_data_file
light_service
linker_prop
linkerconfig_file
mock_ota_prop

2
private/service_contexts
View File

@ -1,3 +1,4 @@
android.hardware.light.ILights/default u:object_r:hal_light_service:s0
android.hardware.power.IPower/default u:object_r:hal_power_service:s0
android.hardware.rebootescrow.IRebootEscrow/default u:object_r:hal_rebootescrow_service:s0
android.hardware.vibrator.IVibrator/default u:object_r:hal_vibrator_service:s0
@ -114,6 +115,7 @@ isms u:object_r:radio_service:s0
isub u:object_r:radio_service:s0
jobscheduler u:object_r:jobscheduler_service:s0
launcherapps u:object_r:launcherapps_service:s0
lights u:object_r:light_service:s0
location u:object_r:location_service:s0
lock_settings u:object_r:lock_settings_service:s0
looper_stats u:object_r:looper_stats_service:s0

1
public/domain.te
View File

@ -652,6 +652,7 @@ full_treble_only(`
-audioserver_service # TODO(b/36783122) remove exemptions below once app_api_service is fixed
-cameraserver_service
-drmserver_service
-hal_light_service # TODO(b/148154485) remove once all violators are gone
-keystore_service
-mediadrmserver_service
-mediaextractor_service

7
public/hal_light.te
View File

@ -4,6 +4,13 @@ binder_call(hal_light_server, hal_light_client)
hal_attribute_hwservice(hal_light, hal_light_hwservice)
add_service(hal_light_server, hal_light_service)
binder_call(hal_light_server, servicemanager)
allow hal_light_client hal_light_service:service_manager find;
allow hal_light_server dumpstate:fifo_file write;
allow hal_light sysfs_leds:lnk_file read;
allow hal_light sysfs_leds:file rw_file_perms;
allow hal_light sysfs_leds:dir r_dir_perms;

2
public/service.te
View File

@ -117,6 +117,7 @@ type ipsec_service, app_api_service, ephemeral_app_api_service, system_server_se
type iris_service, app_api_service, system_server_service, service_manager_type;
type jobscheduler_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
type launcherapps_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
type light_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
type location_service, app_api_service, ephemeral_app_api_service, system_server_service, service_manager_type;
type lock_settings_service, system_api_service, system_server_service, service_manager_type;
type looper_stats_service, system_server_service, service_manager_type;
@ -205,6 +206,7 @@ type tethering_service, app_api_service, ephemeral_app_api_service, system_serve
### HAL Services
###
type hal_light_service, vendor_service, service_manager_type;
type hal_power_service, vendor_service, service_manager_type;
type hal_rebootescrow_service, vendor_service, service_manager_type;
type hal_vibrator_service, vendor_service, service_manager_type;