Merge "Add sepolicy rules for fingerprint hal" into tm-dev

This commit is contained in:
TreeHugger Robot 2022-03-02 02:40:58 +00:00 committed by Android (Google) Code Review
commit c865c80379
5 changed files with 5 additions and 10 deletions

View file

@ -1,5 +1,3 @@
#b/220263520
dontaudit hal_fingerprint_default vendor_default_prop:property_service set;
# b/183338543
dontaudit hal_fingerprint_default system_data_root_file:file { read };
dontaudit hal_fingerprint_default default_prop:file { getattr };

View file

@ -8,9 +8,7 @@ allow hal_fingerprint_default sysfs_fingerprint:dir r_dir_perms;
allow hal_fingerprint_default sysfs_fingerprint:file rw_file_perms;
allow hal_fingerprint_default fwk_stats_service:service_manager find;
get_prop(hal_fingerprint_default, fingerprint_ghbm_prop)
userdebug_or_eng(`
get_prop(hal_fingerprint_default, vendor_fingerprint_fake_prop)
')
set_prop(hal_fingerprint_default, vendor_fingerprint_prop)
add_hwservice(hal_fingerprint_default, hal_fingerprint_ext_hwservice)
# allow fingerprint to access power hal

View file

@ -48,7 +48,7 @@ vendor_internal_prop(vendor_touchpanel_prop)
vendor_internal_prop(vendor_tcpdump_log_prop)
# Fingerprint
vendor_internal_prop(vendor_fingerprint_fake_prop)
vendor_internal_prop(vendor_fingerprint_prop)
# Dynamic sensor
vendor_internal_prop(vendor_dynamic_sensor_prop)

View file

@ -105,7 +105,8 @@ vendor.tcpdump.log.alwayson u:object_r:vendor_tcpdump_log_pr
vendor.tcpdump.output.dir u:object_r:vendor_tcpdump_log_prop:s0
# Fingerprint
vendor.fingerprint.disable.fake u:object_r:vendor_fingerprint_fake_prop:s0
vendor.fingerprint. u:object_r:vendor_fingerprint_prop:s0
vendor.gf. u:object_r:vendor_fingerprint_prop:s0
# Dynamic sensor
vendor.dynamic_sensor. u:object_r:vendor_dynamic_sensor_prop:s0

View file

@ -34,6 +34,4 @@ get_prop(vendor_init, vendor_battery_profile_prop)
set_prop(vendor_init, vendor_battery_defender_prop)
# Fingerprint property
userdebug_or_eng(`
set_prop(vendor_init, vendor_fingerprint_fake_prop)
')
set_prop(vendor_init, vendor_fingerprint_prop)