Allow the sensor HAL to access raw HID devices. am: d60ebc5327 am: 35b6d77e0c

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/15847652

Change-Id: I9bb49fa27647423d27a4d8cb5444412b5220930c
This commit is contained in:
Erik Staats 2021-09-27 19:06:50 +00:00 committed by Automerger Merge Worker
commit c57b0bdb55
3 changed files with 11 additions and 0 deletions

View file

@ -52,6 +52,9 @@ allow hal_sensors_default sysfs_aoc_dumpstate:file r_file_perms;
# Allow access for dynamic sensor properties.
get_prop(hal_sensors_default, vendor_dynamic_sensor_prop)
# Allow access to raw HID devices for dynamic sensors.
allow hal_sensors_default hidraw_device:chr_file rw_file_perms;
#
# Suez type enforcements.
#

View file

@ -50,3 +50,7 @@ type amcs_device, dev_type;
# Battery history
type battery_history_device, dev_type;
# Raw HID device
type hidraw_device, dev_type;

View file

@ -438,3 +438,7 @@
/vendor/lib64/android\.frameworks\.stats-V1-ndk\.so u:object_r:same_process_hal_file:s0
/vendor/lib64/vendor-pixelatoms-cpp\.so u:object_r:same_process_hal_file:s0
/vendor/lib64/libprotobuf-cpp-lite-3\.9\.1\.so u:object_r:same_process_hal_file:s0
# Raw HID device
/dev/hidraw[0-9]* u:object_r:hidraw_device:s0