Allow fingerprint hal to access fingerprint device
Fixes the following avc denials: 03-18 10:57:10.612 947 947 I android.hardwar: type=1400 audit(0.0:8): avc: denied { open } for path="/dev/goodix_fp" dev="tmpfs" ino=482 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=1 03-18 10:57:10.632 947 947 I android.hardwar: type=1400 audit(0.0:9): avc: denied { ioctl } for path="/dev/goodix_fp" dev="tmpfs" ino=482 ioctlcmd=0x6707 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=1 03-18 10:57:13.672 947 947 I android.hardwar: type=1400 audit(0.0:14): avc: denied { ioctl } for path="/dev/goodix_fp" dev="tmpfs" ino=482 ioctlcmd=0x6706 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=1 03-18 10:57:32.704 947 947 I HwBinder:947_1: type=1400 audit(0.0:26): avc: denied { ioctl } for path="/dev/goodix_fp" dev="tmpfs" ino=482 ioctlcmd=0x6705 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=1 Bug: 171943101 Test: No above avc denials in logcat. Change-Id: I254a01a2c11fcaba9ad3f387862a8d0ddafffd38
This commit is contained in:
parent
0aef3b56c5
commit
10fda56cd1
3 changed files with 8 additions and 0 deletions
3
whitechapel/vendor/google/device.te
vendored
3
whitechapel/vendor/google/device.te
vendored
|
@ -53,3 +53,6 @@ type sscoredump_device, dev_type;
|
|||
|
||||
# AOC device
|
||||
type aoc_device, dev_type;
|
||||
|
||||
# Fingerprint device
|
||||
type fingerprint_device, dev_type;
|
||||
|
|
3
whitechapel/vendor/google/file_contexts
vendored
3
whitechapel/vendor/google/file_contexts
vendored
|
@ -415,3 +415,6 @@
|
|||
|
||||
# BigOcean
|
||||
/dev/bigocean u:object_r:video_device:s0
|
||||
|
||||
# Fingerprint
|
||||
/dev/goodix_fp u:object_r:fingerprint_device:s0
|
||||
|
|
2
whitechapel/vendor/google/hal_fingerprint_default.te
vendored
Normal file
2
whitechapel/vendor/google/hal_fingerprint_default.te
vendored
Normal file
|
@ -0,0 +1,2 @@
|
|||
allow hal_fingerprint_default fingerprint_device:chr_file rw_file_perms;
|
||||
|
Loading…
Add table
Add a link
Reference in a new issue