gs101-sepolicy: Fix avc denials for sysfs_vendor_sched

Bug: 190011861
Bug: 190011862
Bug: 190011863
Bug: 190012301
Bug: 190012320
Test: boot to home
Change-Id: Icddb42fb194547211e33cf1d871e839a954b0919
This commit is contained in:
Rick Yiu 2021-06-03 17:52:36 +08:00
parent 9cfc661bee
commit a4dbe2ef40
5 changed files with 12 additions and 0 deletions

View file

@ -2,6 +2,9 @@ type hbmsvmanager_app, domain, coredomain;
app_domain(hbmsvmanager_app); app_domain(hbmsvmanager_app);
allow hbmsvmanager_app sysfs_vendor_sched:dir r_dir_perms;
allow hbmsvmanager_app sysfs_vendor_sched:file w_file_perms;
allow hbmsvmanager_app hal_pixel_display_service:service_manager find; allow hbmsvmanager_app hal_pixel_display_service:service_manager find;
binder_call(hbmsvmanager_app, hal_graphics_composer_default) binder_call(hbmsvmanager_app, hal_graphics_composer_default)

2
whitechapel/vendor/google/nfc.te vendored Normal file
View file

@ -0,0 +1,2 @@
allow nfc sysfs_vendor_sched:dir r_dir_perms;
allow nfc sysfs_vendor_sched:file w_file_perms;

View file

@ -4,6 +4,9 @@ allow platform_app hal_exynos_rild_hwservice:hwservice_manager find;
allow platform_app hal_wlc_hwservice:hwservice_manager find; allow platform_app hal_wlc_hwservice:hwservice_manager find;
binder_call(platform_app, hal_wlc) binder_call(platform_app, hal_wlc)
allow platform_app sysfs_vendor_sched:dir r_dir_perms;
allow platform_app sysfs_vendor_sched:file w_file_perms;
allow platform_app nfc_service:service_manager find; allow platform_app nfc_service:service_manager find;
allow platform_app uwb_service:service_manager find; allow platform_app uwb_service:service_manager find;

View file

@ -1 +1,3 @@
allow radio hal_exynos_rild_hwservice:hwservice_manager find; allow radio hal_exynos_rild_hwservice:hwservice_manager find;
allow radio sysfs_vendor_sched:dir r_dir_perms;
allow radio sysfs_vendor_sched:file w_file_perms;

View file

@ -0,0 +1,2 @@
allow secure_element sysfs_vendor_sched:dir r_dir_perms;
allow secure_element sysfs_vendor_sched:file w_file_perms;