uwb: permissions for factory uwb calibration file am: 29aa981623
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15616315 Change-Id: I9755128c2a7a1039cb3b1c5a2e3913a0965540d9
This commit is contained in:
commit
7a06a7a434
5 changed files with 22 additions and 0 deletions
2
whitechapel/vendor/google/file.te
vendored
2
whitechapel/vendor/google/file.te
vendored
|
@ -185,6 +185,8 @@ type sysfs_video, sysfs_type, fs_type;
|
||||||
|
|
||||||
# UWB vendor
|
# UWB vendor
|
||||||
type uwb_vendor_data_file, file_type, data_file_type, app_data_file_type;
|
type uwb_vendor_data_file, file_type, data_file_type, app_data_file_type;
|
||||||
|
type persist_uwb_file, file_type, vendor_persist_type;
|
||||||
|
type uwb_data_vendor, file_type, data_file_type;
|
||||||
|
|
||||||
# PixelStats_vendor
|
# PixelStats_vendor
|
||||||
type sysfs_pixelstats, fs_type, sysfs_type;
|
type sysfs_pixelstats, fs_type, sysfs_type;
|
||||||
|
|
3
whitechapel/vendor/google/file_contexts
vendored
3
whitechapel/vendor/google/file_contexts
vendored
|
@ -349,6 +349,9 @@
|
||||||
# Uwb
|
# Uwb
|
||||||
# R4
|
# R4
|
||||||
/vendor/bin/hw/hardware\.qorvo\.uwb-service u:object_r:hal_uwb_default_exec:s0
|
/vendor/bin/hw/hardware\.qorvo\.uwb-service u:object_r:hal_uwb_default_exec:s0
|
||||||
|
/vendor/bin/init\.uwb\.calib\.sh u:object_r:vendor_uwb_init_exec:s0
|
||||||
|
/mnt/vendor/persist/uwb(/.*)? u:object_r:persist_uwb_file:s0
|
||||||
|
/data/vendor/uwb(/.*)? u:object_r:uwb_data_vendor:s0
|
||||||
|
|
||||||
# RILD files
|
# RILD files
|
||||||
/data/vendor/rild(/.*)? u:object_r:rild_vendor_data_file:s0
|
/data/vendor/rild(/.*)? u:object_r:rild_vendor_data_file:s0
|
||||||
|
|
4
whitechapel/vendor/google/hal_nfc_default.te
vendored
4
whitechapel/vendor/google/hal_nfc_default.te
vendored
|
@ -7,3 +7,7 @@ set_prop(hal_nfc_default, vendor_secure_element_prop)
|
||||||
# Modem property
|
# Modem property
|
||||||
set_prop(hal_nfc_default, vendor_modem_prop)
|
set_prop(hal_nfc_default, vendor_modem_prop)
|
||||||
|
|
||||||
|
# Access uwb cal for SecureRanging Applet
|
||||||
|
allow hal_nfc_default uwb_data_vendor:dir r_dir_perms;
|
||||||
|
allow hal_nfc_default uwb_data_vendor:file r_file_perms;
|
||||||
|
|
||||||
|
|
3
whitechapel/vendor/google/hal_uwb_default.te
vendored
3
whitechapel/vendor/google/hal_uwb_default.te
vendored
|
@ -6,3 +6,6 @@ add_service(hal_uwb_default, hal_uwb_service)
|
||||||
|
|
||||||
hal_server_domain(hal_uwb_default, hal_uwb)
|
hal_server_domain(hal_uwb_default, hal_uwb)
|
||||||
binder_call(hal_uwb_default, uwb_vendor_app)
|
binder_call(hal_uwb_default, uwb_vendor_app)
|
||||||
|
|
||||||
|
allow hal_uwb_default uwb_data_vendor:dir create_dir_perms;
|
||||||
|
allow hal_uwb_default uwb_data_vendor:file create_file_perms;
|
||||||
|
|
10
whitechapel/vendor/google/vendor_uwb_init.te
vendored
Normal file
10
whitechapel/vendor/google/vendor_uwb_init.te
vendored
Normal file
|
@ -0,0 +1,10 @@
|
||||||
|
type vendor_uwb_init, domain;
|
||||||
|
type vendor_uwb_init_exec, exec_type, vendor_file_type, file_type;
|
||||||
|
|
||||||
|
init_daemon_domain(vendor_uwb_init)
|
||||||
|
|
||||||
|
allow vendor_uwb_init vendor_shell_exec:file rx_file_perms;
|
||||||
|
allow vendor_uwb_init vendor_toolbox_exec:file rx_file_perms;
|
||||||
|
|
||||||
|
allow vendor_uwb_init uwb_data_vendor:file create_file_perms;
|
||||||
|
allow vendor_uwb_init uwb_data_vendor:dir w_dir_perms;
|
Loading…
Add table
Add a link
Reference in a new issue