From 9b54bf3665abce7a6f5f5df22069a8ef081ad80e Mon Sep 17 00:00:00 2001 From: Kris Chen Date: Wed, 8 Dec 2021 07:05:51 +0800 Subject: [PATCH] Allow hal_fingerprint_default to access fwk_sensor_hwservice Fix the following avc denial: avc: denied { find } for interface=android.frameworks.sensorservice::ISensorManager sid=u:r:hal_fingerprint_default:s0 pid=1258 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:fwk_sensor_hwservice:s0 tclass=hwservice_manager permissive=0 Bug: 197789721 Test: build and test fingerprint on device. Change-Id: I7494f28e69e5a1b660dc7fbaa528b1088048723b --- whitechapel/vendor/google/hal_fingerprint_default.te | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/whitechapel/vendor/google/hal_fingerprint_default.te b/whitechapel/vendor/google/hal_fingerprint_default.te index b2378682..d1ac4d72 100644 --- a/whitechapel/vendor/google/hal_fingerprint_default.te +++ b/whitechapel/vendor/google/hal_fingerprint_default.te @@ -20,3 +20,7 @@ r_dir_file(hal_fingerprint_default, sysfs_chosen) # Allow fingerprint to access calibration blk device. allow hal_fingerprint_default mfg_data_block_device:blk_file { rw_file_perms }; allow hal_fingerprint_default block_device:dir search; + +# Allow fingerprint to access fwk_sensor_hwservice +allow hal_fingerprint_default fwk_sensor_hwservice:hwservice_manager find; +