From 8d4f1c1f07019f3a968b4e9a119a88513c4a585d Mon Sep 17 00:00:00 2001 From: KRIS CHEN Date: Tue, 5 Nov 2024 09:31:29 +0000 Subject: [PATCH] Allow fingerprint HAL to access IGoodixFingerprintDaemon Fix the following avc denial: avc: denied { add } for pid=1285 uid=1000 name=vendor.goodix.hardware.biometrics.fingerprint.IGoodixFingerprintDaemon/default scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:default_android_service:s0 tclass=service_manager permissive=0 Flag: EXEMPT NDK Bug: 376602341 Test: boot with no relevant error Change-Id: I12b5824d239bb3b55bb82fb50b9f6fc4c38b36c5 --- fingerprint/sepolicy/service_contexts | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 fingerprint/sepolicy/service_contexts diff --git a/fingerprint/sepolicy/service_contexts b/fingerprint/sepolicy/service_contexts new file mode 100644 index 0000000..4cc220f --- /dev/null +++ b/fingerprint/sepolicy/service_contexts @@ -0,0 +1,2 @@ +# Fingerprint HAL extension +vendor.goodix.hardware.biometrics.fingerprint.IGoodixFingerprintDaemon/default u:object_r:hal_fingerprint_service:s0