PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow CAS AIDL sample HAL

Browse Source 
Bug: 230377377, 227673974
Test: manual
Change-Id: Ied6822d8114404b85dbed56ae4806de1bfb43e54
This commit is contained in:
Shraddha Basantwani 2022-09-21 17:35:31 +05:30
parent 9a8980aed5
commit bacf949002
6 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
build/soong/service_fuzzer_bindings.go
View File

@ -33,6 +33,7 @@ var (
"android.hardware.broadcastradio.IBroadcastRadio/amfm": []string{},
"android.hardware.broadcastradio.IBroadcastRadio/dab": []string{},
"android.hardware.camera.provider.ICameraProvider/internal/0": []string{},
"android.hardware.cas.IMediaCasService/default": []string{},
"android.hardware.confirmationui.IConfirmationUI/default": []string{},
"android.hardware.contexthub.IContextHub/default": []string{},
"android.hardware.drm.IDrmFactory/clearkey": []string{},

1
private/compat/33.0/33.0.ignore.cil
View File

@ -12,6 +12,7 @@
device_config_vendor_system_native_prop
devicelock_service
hal_bootctl_service
hal_cas_service
hal_remoteaccess_service
hal_thermal_service
hal_tv_input_service

1
private/service_contexts
View File

@ -18,6 +18,7 @@ android.hardware.broadcastradio.IBroadcastRadio/dab u:object_r:
# The instance here is internal/0 following naming convention for ICameraProvider.
# It advertises internal camera devices.
android.hardware.camera.provider.ICameraProvider/internal/0 u:object_r:hal_camera_service:s0
android.hardware.cas.IMediaCasService/default u:object_r:hal_cas_service:s0
android.hardware.confirmationui.IConfirmationUI/default u:object_r:hal_confirmationui_service:s0
android.hardware.contexthub.IContextHub/default u:object_r:hal_contexthub_service:s0
android.hardware.drm.IDrmFactory/clearkey u:object_r:hal_drm_service:s0

5
public/hal_cas.te
View File

@ -5,6 +5,11 @@ binder_call(hal_cas_server, hal_cas_client)
hal_attribute_hwservice(hal_cas, hal_cas_hwservice)
allow hal_cas_server hidl_memory_hwservice:hwservice_manager find;
hal_attribute_service(hal_cas, hal_cas_service)
binder_call(hal_cas_server, servicemanager)
binder_call(hal_cas_client, servicemanager)
# Permit reading device's serial number from system properties
get_prop(hal_cas_server, serialno_prop)

1
public/service.te
View File

@ -273,6 +273,7 @@ type hal_authsecret_service, protected_service, hal_service_type, service_manage
type hal_bootctl_service, protected_service, hal_service_type, service_manager_type;
type hal_broadcastradio_service, protected_service, hal_service_type, service_manager_type;
type hal_camera_service, protected_service, hal_service_type, service_manager_type;
type hal_cas_service, hal_service_type, service_manager_type;
type hal_confirmationui_service, protected_service, hal_service_type, service_manager_type;
type hal_contexthub_service, protected_service, hal_service_type, service_manager_type;
type hal_dice_service, protected_service, hal_service_type, service_manager_type;

2
vendor/file_contexts vendored
View File

@ -40,6 +40,8 @@
/(vendor|system/vendor)/bin/hw/android\.hardware\.drm-service(-lazy)?\.clearkey u:object_r:hal_drm_clearkey_aidl_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.cas@1\.[0-2]-service u:object_r:hal_cas_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.cas@1\.[0-2]-service-lazy u:object_r:hal_cas_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.cas-service\.example u:object_r:hal_cas_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.cas-service\.example-lazy u:object_r:hal_cas_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.dumpstate@1\.[0-1]-service\.example u:object_r:hal_dumpstate_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.dumpstate-service\.example u:object_r:hal_dumpstate_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.gatekeeper@1\.0-service u:object_r:hal_gatekeeper_default_exec:s0