label kernel modules and grant bt permission

Bug: 182320300
Bug: 182320258
Test: boot to home and connect to bluetooth headset under enforcing mode
Change-Id: I6f6e8359d03eb4205268d56a1fcd50ce1445f442
This commit is contained in:
Adam Shih 2021-03-10 10:36:45 +08:00
parent 487f66f754
commit 58b3344c7a
4 changed files with 2 additions and 11 deletions

View file

@ -1,4 +1,2 @@
# b/182320300 # b/182320300
dontaudit hal_bluetooth_btlinux servicemanager:binder { call };
dontaudit hal_bluetooth_btlinux servicemanager:binder { call };
dontaudit hal_bluetooth_btlinux default_android_service:service_manager { find }; dontaudit hal_bluetooth_btlinux default_android_service:service_manager { find };

View file

@ -2,12 +2,3 @@
dontaudit init-insmod-sh vendor_regmap_debugfs:dir { search }; dontaudit init-insmod-sh vendor_regmap_debugfs:dir { search };
dontaudit init-insmod-sh vendor_regmap_debugfs:dir { search }; dontaudit init-insmod-sh vendor_regmap_debugfs:dir { search };
dontaudit init-insmod-sh vendor_regmap_debugfs:dir { search }; dontaudit init-insmod-sh vendor_regmap_debugfs:dir { search };
# b/182320258
dontaudit init-insmod-sh vendor_file:system { module_load };
dontaudit init-insmod-sh vendor_file:system { module_load };
dontaudit init-insmod-sh vendor_file:system { module_load };
dontaudit init-insmod-sh vendor_file:system { module_load };
dontaudit init-insmod-sh vendor_file:system { module_load };
dontaudit init-insmod-sh vendor_file:system { module_load };
dontaudit init-insmod-sh vendor_file:system { module_load };
dontaudit init-insmod-sh vendor_file:system { module_load };

View file

@ -356,6 +356,7 @@
# Vendor_kernel_modules # Vendor_kernel_modules
/vendor/lib/modules/.*\.ko u:object_r:vendor_kernel_modules:s0 /vendor/lib/modules/.*\.ko u:object_r:vendor_kernel_modules:s0
/vendor_dlkm/lib/modules/.*\.ko u:object_r:vendor_kernel_modules:s0
# Display # Display
/vendor/lib(64)?/libion_google\.so u:object_r:same_process_hal_file:s0 /vendor/lib(64)?/libion_google\.so u:object_r:same_process_hal_file:s0

View file

@ -4,6 +4,7 @@ allow hal_bluetooth_btlinux sysfs_bluetooth_writable:file rw_file_perms;
allow hal_bluetooth_btlinux proc_bluetooth_writable:file rw_file_perms; allow hal_bluetooth_btlinux proc_bluetooth_writable:file rw_file_perms;
allow hal_bluetooth_btlinux hci_attach_dev:chr_file rw_file_perms; allow hal_bluetooth_btlinux hci_attach_dev:chr_file rw_file_perms;
allow hal_bluetooth_btlinux wb_coexistence_dev:chr_file rw_file_perms; allow hal_bluetooth_btlinux wb_coexistence_dev:chr_file rw_file_perms;
binder_call(hal_bluetooth_btlinux, servicemanager)
# power stats # power stats
vndbinder_use(hal_bluetooth_btlinux) vndbinder_use(hal_bluetooth_btlinux)