Fix sensors_hal selinux denials.
Bug: 214473093 Bug: 218930975 Bug: 210067282 Test: com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot Change-Id: Ifd865efd0544f246d1c188f3edce9f05f27313d2
This commit is contained in:
@@ -1,6 +0,0 @@
|
||||
# b/214473093
|
||||
dontaudit hal_sensors_default sensor_reg_data_file:file { getattr };
|
||||
dontaudit hal_sensors_default sensor_reg_data_file:file { open };
|
||||
dontaudit hal_sensors_default sensor_reg_data_file:file { read };
|
||||
# b/218930975
|
||||
dontaudit hal_sensors_default hal_graphics_composer_default:binder { call };
|
||||
@@ -25,6 +25,7 @@ r_dir_file(hal_sensors_default, persist_camera_file)
|
||||
|
||||
# Allow creation and writing of sensor registry data files.
|
||||
allow hal_sensors_default sensor_reg_data_file:dir r_dir_perms;
|
||||
allow hal_sensors_default sensor_reg_data_file:file r_file_perms;
|
||||
|
||||
# Allow access to the display info for ALS.
|
||||
allow hal_sensors_default sysfs_display:file rw_file_perms;
|
||||
|
||||
Reference in New Issue
Block a user