From 3df0d7812b3f1c996b7ffce6f1c7cd3b66d70b08 Mon Sep 17 00:00:00 2001 From: Kris Chen Date: Fri, 25 Mar 2022 14:53:53 +0800 Subject: [PATCH] Allow hal_fingerprint_default to access sysfs_display Fix the following avc denial: avc: denied { read } for name="panel_name" dev="sysfs" ino=71133 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:sysfs_display:s0 tclass=file permissive=0 Bug: 223687187 Test: build and test fingerprint on device. Change-Id: Ic2b2cadb97f36643b79de6a8ebfe2232093fe7d7 --- whitechapel/vendor/google/hal_fingerprint_default.te | 2 ++ 1 file changed, 2 insertions(+) diff --git a/whitechapel/vendor/google/hal_fingerprint_default.te b/whitechapel/vendor/google/hal_fingerprint_default.te index d1ac4d72..2b2e852d 100644 --- a/whitechapel/vendor/google/hal_fingerprint_default.te +++ b/whitechapel/vendor/google/hal_fingerprint_default.te @@ -24,3 +24,5 @@ allow hal_fingerprint_default block_device:dir search; # Allow fingerprint to access fwk_sensor_hwservice allow hal_fingerprint_default fwk_sensor_hwservice:hwservice_manager find; +# Allow fingerprint to read sysfs_display +allow hal_fingerprint_default sysfs_display:file r_file_perms;