gs101-sepolicy: Add twoshay permissions

Add twoshay and touch input context library permissions

Bug: 173330899
Bug: 173330981
Test: check boot-time twoshay startup and no denials.
Signed-off-by: Steve Pfetsch <spfetsch@google.com>
Change-Id: I68aace66f49c2af1ebfd4bde7082039f9caf3f64
Signed-off-by: Tai Kuo <taikuo@google.com>
This commit is contained in:
Tai Kuo 2021-03-10 17:05:47 +08:00
parent 4dd3e1e99e
commit 8cac55487b
3 changed files with 15 additions and 0 deletions

View file

@ -30,6 +30,9 @@ type cpuctl_device, dev_type;
# Bt Wifi Coexistence device # Bt Wifi Coexistence device
type wb_coexistence_dev, dev_type; type wb_coexistence_dev, dev_type;
# Touch
type touch_offload_device, dev_type;
# LWIS (Lightweight Imaging Subsystem) devices, used by Lyric camera HAL # LWIS (Lightweight Imaging Subsystem) devices, used by Lyric camera HAL
type lwis_device, dev_type; type lwis_device, dev_type;

View file

@ -363,6 +363,10 @@
/vendor/lib(64)?/hw/gralloc\.gs101\.so u:object_r:same_process_hal_file:s0 /vendor/lib(64)?/hw/gralloc\.gs101\.so u:object_r:same_process_hal_file:s0
/vendor/lib(64)?/hw/vulkan\.gs101\.so u:object_r:same_process_hal_file:s0 /vendor/lib(64)?/hw/vulkan\.gs101\.so u:object_r:same_process_hal_file:s0
# Touch
/dev/touch_offload u:object_r:touch_offload_device:s0
/vendor/bin/twoshay u:object_r:twoshay_exec:s0
# Fingerprint # Fingerprint
/vendor/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.1-service\.goodix u:object_r:hal_fingerprint_default_exec:s0 /vendor/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.1-service\.goodix u:object_r:hal_fingerprint_default_exec:s0
/vendor/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.1-service\.fpc u:object_r:hal_fingerprint_default_exec:s0 /vendor/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.1-service\.fpc u:object_r:hal_fingerprint_default_exec:s0

8
whitechapel/vendor/google/twoshay.te vendored Normal file
View file

@ -0,0 +1,8 @@
type twoshay, domain;
type twoshay_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(twoshay)
allow twoshay touch_offload_device:chr_file rw_file_perms;
allow twoshay twoshay:capability sys_nice;