From 72011a8a871d9604f5e434484bdb0f7d019d82d9 Mon Sep 17 00:00:00 2001 From: Cheng Gu Date: Fri, 2 Apr 2021 12:10:05 -0700 Subject: [PATCH] gs101-sepolicy: Allow rlsservice to access range sensor Fix: 184295618 Test: rlsservice_test Change-Id: Iee4cc5376e0eb67e75ae94cd15b5211a7ec819ef --- whitechapel/vendor/google/device.te | 3 +++ whitechapel/vendor/google/file_contexts | 1 + whitechapel/vendor/google/rlsservice.te | 3 +++ 3 files changed, 7 insertions(+) diff --git a/whitechapel/vendor/google/device.te b/whitechapel/vendor/google/device.te index fef97187..f9d422fc 100644 --- a/whitechapel/vendor/google/device.te +++ b/whitechapel/vendor/google/device.te @@ -36,6 +36,9 @@ type touch_offload_device, dev_type; # LWIS (Lightweight Imaging Subsystem) devices, used by Lyric camera HAL type lwis_device, dev_type; +# RLS device +type rls_device, dev_type; + # sensor direct DMA-BUF heap type sensor_direct_heap_device, dmabuf_heap_device_type, dev_type; diff --git a/whitechapel/vendor/google/file_contexts b/whitechapel/vendor/google/file_contexts index 0eb94c7a..91773613 100644 --- a/whitechapel/vendor/google/file_contexts +++ b/whitechapel/vendor/google/file_contexts @@ -175,6 +175,7 @@ /vendor/lib(64)?/lib_aion_buffer\.so u:object_r:same_process_hal_file:s0 /vendor/lib(64)?/libGralloc4Wrapper\.so u:object_r:same_process_hal_file:s0 +/dev/stmvl53l1_ranging u:object_r:rls_device:s0 /dev/lwis-act0 u:object_r:lwis_device:s0 /dev/lwis-act1 u:object_r:lwis_device:s0 diff --git a/whitechapel/vendor/google/rlsservice.te b/whitechapel/vendor/google/rlsservice.te index 2217908d..10f76dcc 100644 --- a/whitechapel/vendor/google/rlsservice.te +++ b/whitechapel/vendor/google/rlsservice.te @@ -13,6 +13,9 @@ allow rlsservice persist_camera_file:dir search; allow rlsservice persist_camera_file:file r_file_perms; allow rlsservice mnt_vendor_file:dir search; +# access device files +allow rlsservice rls_device:chr_file rw_file_perms; + binder_call(rlsservice, hal_sensors_default) binder_call(rlsservice, hal_camera_default)