Merge "Move twoshay definitions to hardware/google/pixel-sepolicy/input." into sc-v2-dev

This commit is contained in:
Steve Pfetsch 2021-10-27 00:14:20 +00:00 committed by Android (Google) Code Review
commit 421cbb2f61
8 changed files with 0 additions and 33 deletions

View file

@ -1,6 +1,4 @@
# b/185723618 # b/185723618
dontaudit dumpstate hal_power_stats_vendor_service:service_manager { find }; dontaudit dumpstate hal_power_stats_vendor_service:service_manager { find };
# b/187795940
dontaudit dumpstate twoshay:binder call;
# b/190337283 # b/190337283
dontaudit dumpstate debugfs_wakeup_sources:file read; dontaudit dumpstate debugfs_wakeup_sources:file read;

View file

@ -26,9 +26,6 @@ type cpuctl_device, dev_type;
# Bt Wifi Coexistence device # Bt Wifi Coexistence device
type wb_coexistence_dev, dev_type; type wb_coexistence_dev, dev_type;
# Touch
type touch_offload_device, dev_type;
# LWIS (Lightweight Imaging Subsystem) devices, used by Lyric camera HAL # LWIS (Lightweight Imaging Subsystem) devices, used by Lyric camera HAL
type lwis_device, dev_type; type lwis_device, dev_type;

View file

@ -383,10 +383,6 @@
/vendor/lib(64)?/hw/vulkan\.gs101\.so u:object_r:same_process_hal_file:s0 /vendor/lib(64)?/hw/vulkan\.gs101\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/arm\.graphics-V1-ndk_platform\.so u:object_r:same_process_hal_file:s0 /vendor/lib(64)?/arm\.graphics-V1-ndk_platform\.so u:object_r:same_process_hal_file:s0
# Touch
/dev/touch_offload u:object_r:touch_offload_device:s0
/vendor/bin/twoshay u:object_r:twoshay_exec:s0
# Fingerprint # Fingerprint
/vendor/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.1-service\.goodix u:object_r:hal_fingerprint_default_exec:s0 /vendor/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.1-service\.goodix u:object_r:hal_fingerprint_default_exec:s0
/vendor/bin/hw/android\.hardware\.biometrics\.fingerprint-service\.goodix u:object_r:hal_fingerprint_default_exec:s0 /vendor/bin/hw/android\.hardware\.biometrics\.fingerprint-service\.goodix u:object_r:hal_fingerprint_default_exec:s0

View file

@ -64,9 +64,6 @@ allow hal_dumpstate_default sysfs_thermal:dir r_dir_perms;
allow hal_dumpstate_default sysfs_thermal:file r_file_perms; allow hal_dumpstate_default sysfs_thermal:file r_file_perms;
allow hal_dumpstate_default sysfs_thermal:lnk_file read; allow hal_dumpstate_default sysfs_thermal:lnk_file read;
allow hal_dumpstate_default touch_context_service:service_manager find;
binder_call(hal_dumpstate_default, twoshay)
# Modem logs # Modem logs
allow hal_dumpstate_default modem_efs_file:dir search; allow hal_dumpstate_default modem_efs_file:dir search;
allow hal_dumpstate_default modem_efs_file:file r_file_perms; allow hal_dumpstate_default modem_efs_file:file r_file_perms;

View file

@ -13,9 +13,6 @@ allow platform_app uwb_service:service_manager find;
allow platform_app fwk_stats_service:service_manager find; allow platform_app fwk_stats_service:service_manager find;
binder_use(platform_app) binder_use(platform_app)
allow platform_app touch_context_service:service_manager find;
binder_call(platform_app, twoshay)
# Fingerprint (UDFPS) GHBM/LHBM toggle # Fingerprint (UDFPS) GHBM/LHBM toggle
get_prop(platform_app, fingerprint_ghbm_prop) get_prop(platform_app, fingerprint_ghbm_prop)

View file

@ -1,4 +1,3 @@
type hal_pixel_display_service, service_manager_type, vendor_service; type hal_pixel_display_service, service_manager_type, vendor_service;
type uwb_vendor_service, service_manager_type, vendor_service; type uwb_vendor_service, service_manager_type, vendor_service;
type touch_context_service, service_manager_type, vendor_service;
type hal_uwb_service, service_manager_type, vendor_service; type hal_uwb_service, service_manager_type, vendor_service;

View file

@ -1,4 +1,3 @@
com.google.hardware.pixel.display.IDisplay/default u:object_r:hal_pixel_display_service:s0 com.google.hardware.pixel.display.IDisplay/default u:object_r:hal_pixel_display_service:s0
com.google.input.ITouchContextService/default u:object_r:touch_context_service:s0
uwb_vendor u:object_r:uwb_vendor_service:s0 uwb_vendor u:object_r:uwb_vendor_service:s0
hardware.qorvo.uwb.IUwb/default u:object_r:hal_uwb_service:s0 hardware.qorvo.uwb.IUwb/default u:object_r:hal_uwb_service:s0

View file

@ -1,16 +0,0 @@
type twoshay, domain;
type twoshay_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(twoshay)
allow twoshay touch_offload_device:chr_file rw_file_perms;
allow twoshay twoshay:capability sys_nice;
binder_use(twoshay)
add_service(twoshay, touch_context_service)
# b/193224954
dontaudit twoshay twoshay:capability dac_override;
allow twoshay fwk_stats_service:service_manager find;
binder_call(twoshay, stats_service_server)