Add sepolicy for SystemUIGoogle to write to lhbm

Bug: 184768835
Bug: 182520014
Test: adb logcat | grep "avc: denied"
Change-Id: Ia200983c87e0b826a0b62052e65cc731453a632f
This commit is contained in:
Ilya Matyukhin 2021-04-12 16:47:20 -07:00
parent 421bee976b
commit acf6b1f5ae
3 changed files with 15 additions and 0 deletions

View file

@ -188,3 +188,7 @@ type sysfs_bcmdhd, sysfs_type, fs_type;
# Video
type sysfs_video, sysfs_type, fs_type;
# TODO(b/184768835): remove this once the bug is fixed
# LHBM (Local High Brightness Mode)
type sysfs_lhbm, sysfs_type, fs_type, mlstrustedobject;

View file

@ -111,6 +111,10 @@ genfscon sysfs /devices/platform/1c2d0000.drmdsim/1c2d0000.drmdsim.0/gamma
genfscon sysfs /devices/platform/1c2c0000.drmdsim/hs_clock u:object_r:sysfs_display:s0
genfscon sysfs /devices/platform/1c2d0000.drmdsim/hs_clock u:object_r:sysfs_display:s0
# TODO(b/184768835): remove this once the bug is fixed
# Display / LHBM (Local High Brightness Mode)
genfscon sysfs /devices/platform/1c2c0000.drmdsim/1c2c0000.drmdsim.0/backlight/panel0-backlight/local_hbm_mode u:object_r:sysfs_lhbm:s0
# Modem
genfscon sysfs /devices/platform/cp-tm1/cp_temp u:object_r:sysfs_modem:s0

View file

@ -12,3 +12,10 @@ binder_call(platform_app, twoshay)
# Fingerprint (UDFPS) GHBM/LHBM toggle
get_prop(platform_app, fingerprint_ghbm_prop)
# TODO(b/184768835): remove this once the bug is fixed
# Fingerprint (UDFPS) LHBM access
userdebug_or_eng(`
allow platform_app sysfs_leds:dir search;
allow platform_app sysfs_lhbm:file rw_file_perms;
')