confirmationui: Allow securedpud to access the systemsuspend HAL.

In order to use a wakelock, securedpud needs access to binder and the
system_suspend_service HAL.

Bug: 274851247
Test: manual, trigger TUI and check for AVC denials
Change-Id: Ibd27d32e092269f91d6557ebddcd27d4ccf1355a
This commit is contained in:
Mike McTernan 2023-04-04 22:59:45 +01:00
parent d1963ac90c
commit 9539d15b4f

View file

@ -3,6 +3,8 @@ type securedpud_slider_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(securedpud_slider)
wakelock_use(securedpud_slider)
allow securedpud_slider dmabuf_heap_device:chr_file r_file_perms;
allow securedpud_slider ion_device:chr_file r_file_perms;
allow securedpud_slider tee_device:chr_file rw_file_perms;