Allow battery_mitigation to use Binder IPC

This is to resolve the following local error when testing with Thermal
 AIDL service enabled:
auditd  : type=1400 audit(0.0:4): avc: denied { call } for comm="servicemanager" scontext=u:r:servicemanager:s0 tcontext=u:r:battery_mitigation:s0 tclass=binder permissive=0

Bug: b/264595820
Test: pts-tradefed run pts -m PtsSELinuxTest
Change-Id: I825ed2b644360e695081fe06489fabf3feb913bd
This commit is contained in:
Xiang Wang 2023-02-02 14:57:10 -08:00
parent a74135a3f3
commit 82860bfe63

View file

@ -20,3 +20,6 @@ allow battery_mitigation sysfs_bcl:lnk_file r_file_perms;
allow battery_mitigation sysfs_thermal:lnk_file r_file_perms; allow battery_mitigation sysfs_thermal:lnk_file r_file_perms;
allow battery_mitigation mitigation_vendor_data_file:dir rw_dir_perms; allow battery_mitigation mitigation_vendor_data_file:dir rw_dir_perms;
allow battery_mitigation mitigation_vendor_data_file:file create_file_perms; allow battery_mitigation mitigation_vendor_data_file:file create_file_perms;
# Allow battery_mitigation to use Binder IPC so that service manager can notify it for callbacks
binder_use(battery_mitigation)