fps: Allow fp to access sensor_servie & property

ELinux : avc:  denied  { find } for pid=826 uid=1000
name=android.frameworks.sensorservice.ISensorManager/default
scontext=u:r:hal_fingerprint_capacitance:s0
tcontext=u:object_r:fwk_sensor_service:s0
tclass=service_manager permissive=0

avc:  denied  { read } for  name="u:object_r:vendor_fingerprint_prop:s0"
dev="tmpfs" ino=380
scontext=u:r:hal_fingerprint_capacitance:s0
tcontext=u:object_r:vendor_fingerprint_prop:s0
tclass=file permissive=0

Bug: 279363703
Test: make selinux_policy -j112
Change-Id: Idd3fe8100a3982a0a0279e44e0be439a16961543
This commit is contained in:
eddielan 2023-06-01 05:24:31 +00:00
parent ff2146ca1f
commit 86776d4e10

View file

@ -25,3 +25,9 @@ add_hwservice(hal_fingerprint_capacitance, hal_fingerprint_capacitance_ext_hwser
# allow fingerprint to access servicemanager
binder_call(hal_fingerprint_capacitance, servicemanager)
# allow fingerprint to access fwk sensor hwservice
allow hal_fingerprint_capacitance fwk_sensor_service:service_manager find;
# allow fingerprint to access fingerprint property
set_prop(hal_fingerprint_capacitance, vendor_fingerprint_prop)