uwb: permissions for factory uwb calibration file am: 29aa981623

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15616315

Change-Id: Ifa053b14b8fe06af7d076b103657ec7232aa8510
This commit is contained in:
Victor Liu 2021-08-25 23:29:46 +00:00 committed by Automerger Merge Worker
commit 5dfabe8acf
5 changed files with 22 additions and 0 deletions

View file

@ -185,6 +185,8 @@ type sysfs_video, sysfs_type, fs_type;
# UWB vendor # UWB vendor
type uwb_vendor_data_file, file_type, data_file_type, app_data_file_type; type uwb_vendor_data_file, file_type, data_file_type, app_data_file_type;
type persist_uwb_file, file_type, vendor_persist_type;
type uwb_data_vendor, file_type, data_file_type;
# PixelStats_vendor # PixelStats_vendor
type sysfs_pixelstats, fs_type, sysfs_type; type sysfs_pixelstats, fs_type, sysfs_type;

View file

@ -349,6 +349,9 @@
# Uwb # Uwb
# R4 # R4
/vendor/bin/hw/hardware\.qorvo\.uwb-service u:object_r:hal_uwb_default_exec:s0 /vendor/bin/hw/hardware\.qorvo\.uwb-service u:object_r:hal_uwb_default_exec:s0
/vendor/bin/init\.uwb\.calib\.sh u:object_r:vendor_uwb_init_exec:s0
/mnt/vendor/persist/uwb(/.*)? u:object_r:persist_uwb_file:s0
/data/vendor/uwb(/.*)? u:object_r:uwb_data_vendor:s0
# RILD files # RILD files
/data/vendor/rild(/.*)? u:object_r:rild_vendor_data_file:s0 /data/vendor/rild(/.*)? u:object_r:rild_vendor_data_file:s0

View file

@ -7,3 +7,7 @@ set_prop(hal_nfc_default, vendor_secure_element_prop)
# Modem property # Modem property
set_prop(hal_nfc_default, vendor_modem_prop) set_prop(hal_nfc_default, vendor_modem_prop)
# Access uwb cal for SecureRanging Applet
allow hal_nfc_default uwb_data_vendor:dir r_dir_perms;
allow hal_nfc_default uwb_data_vendor:file r_file_perms;

View file

@ -6,3 +6,6 @@ add_service(hal_uwb_default, hal_uwb_service)
hal_server_domain(hal_uwb_default, hal_uwb) hal_server_domain(hal_uwb_default, hal_uwb)
binder_call(hal_uwb_default, uwb_vendor_app) binder_call(hal_uwb_default, uwb_vendor_app)
allow hal_uwb_default uwb_data_vendor:dir create_dir_perms;
allow hal_uwb_default uwb_data_vendor:file create_file_perms;

View file

@ -0,0 +1,10 @@
type vendor_uwb_init, domain;
type vendor_uwb_init_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(vendor_uwb_init)
allow vendor_uwb_init vendor_shell_exec:file rx_file_perms;
allow vendor_uwb_init vendor_toolbox_exec:file rx_file_perms;
allow vendor_uwb_init uwb_data_vendor:file create_file_perms;
allow vendor_uwb_init uwb_data_vendor:dir w_dir_perms;