From f544a5a6517145222b33a40acfb62dd1a4ff86c4 Mon Sep 17 00:00:00 2001
From: eddielan <eddielan@google.com>
Date: Fri, 11 Nov 2022 20:10:20 +0800
Subject: [PATCH] sepolicy: Allow fingerprint to access fwk hwservice

11-11 19:57:30.203   464   464 E SELinux : avc:
denied  { find } for interface=android.frameworks.sensorservice::ISensorManager
sid=u:r:hal_fingerprint_capacitance:s0 pid=903
scontext=u:r:hal_fingerprint_capacitance:s0
tcontext=u:object_r:fwk_sensor_hwservice:s0
tclass=hwservice_manager permissive=0

Bug: 258783592
Test: Build pass
Change-Id: I58a31c04cbb45ab12b0bf42a10c57ddf4f065ee7
---
 fingerprint_capacitance/hal_fingerprint_capacitance.te | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/fingerprint_capacitance/hal_fingerprint_capacitance.te b/fingerprint_capacitance/hal_fingerprint_capacitance.te
index 8cc623f..6100d44 100644
--- a/fingerprint_capacitance/hal_fingerprint_capacitance.te
+++ b/fingerprint_capacitance/hal_fingerprint_capacitance.te
@@ -26,3 +26,6 @@ allow hal_fingerprint_capacitance input_device:chr_file rw_file_perms;
 # allow fingerprint to access hwservice
 hwbinder_use(hal_fingerprint_capacitance)
 add_hwservice(hal_fingerprint_capacitance, hal_fingerprint_capacitance_ext_hwservice)
+
+# allow fingerprint to access fwk sensor hwservice
+allow hal_fingerprint_capacitance fwk_sensor_hwservice:hwservice_manager find;