fps: Allow fp to access sensor_servie & property
ELinux : avc: denied { find } for pid=826 uid=1000
name=android.frameworks.sensorservice.ISensorManager/default
scontext=u:r:hal_fingerprint_capacitance:s0
tcontext=u:object_r:fwk_sensor_service:s0
tclass=service_manager permissive=0
avc: denied { read } for name="u:object_r:vendor_fingerprint_prop:s0"
dev="tmpfs" ino=380
scontext=u:r:hal_fingerprint_capacitance:s0
tcontext=u:object_r:vendor_fingerprint_prop:s0
tclass=file permissive=0
Bug: 279363703
Test: make selinux_policy -j112
Change-Id: Idd3fe8100a3982a0a0279e44e0be439a16961543
This commit is contained in:
@@ -25,3 +25,9 @@ add_hwservice(hal_fingerprint_capacitance, hal_fingerprint_capacitance_ext_hwser
|
||||
|
||||
# allow fingerprint to access servicemanager
|
||||
binder_call(hal_fingerprint_capacitance, servicemanager)
|
||||
|
||||
# allow fingerprint to access fwk sensor hwservice
|
||||
allow hal_fingerprint_capacitance fwk_sensor_service:service_manager find;
|
||||
|
||||
# allow fingerprint to access fingerprint property
|
||||
set_prop(hal_fingerprint_capacitance, vendor_fingerprint_prop)
|
||||
|
||||
Reference in New Issue
Block a user