Add sepolicy for gnssd

Bug: 265391808
Test: No avc denied
Change-Id: Ib4645bc0f26ac261c7aae6f1b621303e88e09690
This commit is contained in:
Edwin Tung 2023-07-14 13:55:44 +08:00
parent 309ef096ac
commit e19e985013
2 changed files with 7 additions and 0 deletions

5
vendor/gnssd.te vendored
View file

@ -19,3 +19,8 @@ wakelock_use(gnssd)
# Allow a base set of permissions required for network access.
net_domain(gnssd);
# Allow gnssd to get boot complete
get_prop(gnssd, bootanim_system_prop)
allow gnssd sysfs_soc:file r_file_perms;

2
vendor/hal_gnss_default.te vendored Normal file
View file

@ -0,0 +1,2 @@
allow hal_gnss_default fwk_sensor_service:service_manager find;
allow hal_gnss_default gnssd:unix_stream_socket connectto;