add sepolicy for vibrator manager service am: 6c42229dcc am: a8a51be9ae

Original change: https://googleplex-android-review.googlesource.com/c/device/google/felix-sepolicy/+/18350088

Change-Id: I3f1a2b791dabc0c323e89b9a763be0ff7bc12b03
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Chase Wu 2022-11-03 10:10:10 +00:00 committed by Automerger Merge Worker
commit 6fb0d40d35
6 changed files with 35 additions and 0 deletions

1
vendor/device.te vendored Normal file
View file

@ -0,0 +1 @@
type vibrator_device, dev_type;

View file

@ -11,3 +11,8 @@
/dev/ttySAC18 u:object_r:hci_attach_dev:s0
/dev/logbuffer_btlpm u:object_r:logbuffer_device:s0
/dev/logbuffer_tty18 u:object_r:logbuffer_device:s0
# Haptics
/vendor/bin/hw/android\.hardware\.vibrator-service\.cs40l26-private u:object_r:hal_vibrator_default_exec:s0
/vendor/bin/hw/android\.hardware\.vibrator-service\.cs40l26-stereo-private u:object_r:hal_vibrator_stereo_exec:s0
/dev/gpiochip44 u:object_r:vibrator_device:s0

5
vendor/hal_vibrator_default.te vendored Normal file
View file

@ -0,0 +1,5 @@
# Allow vibrator HAL to communicate with another service
binder_call(hal_vibrator_default, hal_vibrator_stereo);
# Allow vibrator HAL to "add" the hal_vibrator_vndservice service type
add_service(hal_vibrator_default, hal_vibrator_vndservice);

21
vendor/hal_vibrator_stereo_default.te vendored Normal file
View file

@ -0,0 +1,21 @@
# From system sepilicy
type hal_vibrator_stereo, domain;
hal_server_domain(hal_vibrator_stereo, hal_vibrator)
type hal_vibrator_stereo_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_vibrator_stereo)
# From project
get_prop(hal_vibrator_stereo, vendor_vibrator_prop);
get_prop(hal_vibrator_stereo, boot_status_prop);
# Allow vibrator HAL's default implementation to use vendor-binder service
vndbinder_use(hal_vibrator_stereo);
# For gpio dev node
allow hal_vibrator_stereo vibrator_device:chr_file rw_file_perms;
# For vibrator HAL's communication with other service
binder_call(hal_vibrator_stereo, hal_vibrator_default);
allow hal_vibrator_stereo hal_vibrator_vndservice:service_manager find;

1
vendor/vndservice.te vendored Normal file
View file

@ -0,0 +1 @@
type hal_vibrator_vndservice, vndservice_manager_type;

2
vendor/vndservice_contexts vendored Normal file
View file

@ -0,0 +1,2 @@
android.hardware.vibrator.IVibratorSync/default u:object_r:hal_vibrator_vndservice:s0
android.hardware.vibrator.IVibratorSync/dual u:object_r:hal_vibrator_vndservice:s0