Merge "WLC: Cleanup the sysfs_wlc policies"

This commit is contained in:
Ken Yang 2023-01-13 14:41:30 +00:00 committed by Android (Google) Code Review
commit fc2efe09bd
9 changed files with 10 additions and 9 deletions

View file

@ -37,7 +37,6 @@ allow hal_sensors_default sysfs_leds:file rw_file_perms;
# Allow access to the power supply files for MagCC. # Allow access to the power supply files for MagCC.
r_dir_file(hal_sensors_default, sysfs_batteryinfo) r_dir_file(hal_sensors_default, sysfs_batteryinfo)
allow hal_sensors_default sysfs_wlc:dir r_dir_perms;
# Allow access to sensor service for sensor_listener. # Allow access to sensor service for sensor_listener.
binder_call(hal_sensors_default, system_server); binder_call(hal_sensors_default, system_server);

View file

@ -186,3 +186,6 @@ type radio_vendor_data_file, file_type, data_file_type;
userdebug_or_eng(` userdebug_or_eng(`
typeattribute radio_vendor_data_file mlstrustedobject; typeattribute radio_vendor_data_file mlstrustedobject;
') ')
# WLC
type sysfs_wlc, sysfs_type, fs_type;

View file

@ -13,9 +13,6 @@ vndbinder_use(hal_dumpstate_default)
allow hal_dumpstate_default vendor_gps_file:dir r_dir_perms; allow hal_dumpstate_default vendor_gps_file:dir r_dir_perms;
allow hal_dumpstate_default vendor_gps_file:file r_file_perms; allow hal_dumpstate_default vendor_gps_file:file r_file_perms;
allow hal_dumpstate_default sysfs_wlc:dir search;
allow hal_dumpstate_default sysfs_wlc:file r_file_perms;
allow hal_dumpstate_default shell_data_file:file getattr; allow hal_dumpstate_default shell_data_file:file getattr;
allow hal_dumpstate_default radio_vendor_data_file:dir create_dir_perms; allow hal_dumpstate_default radio_vendor_data_file:dir create_dir_perms;

View file

@ -9,7 +9,6 @@ r_dir_file(hal_health_default, sysfs_scsi_devices_0000)
allow hal_health_default fwk_stats_service:service_manager find; allow hal_health_default fwk_stats_service:service_manager find;
binder_use(hal_health_default) binder_use(hal_health_default)
allow hal_health_default sysfs_wlc:dir search;
allow hal_health_default sysfs_batteryinfo:file w_file_perms; allow hal_health_default sysfs_batteryinfo:file w_file_perms;
allow hal_health_default sysfs_thermal:dir search; allow hal_health_default sysfs_thermal:dir search;
allow hal_health_default sysfs_thermal:file w_file_perms; allow hal_health_default sysfs_thermal:file w_file_perms;

View file

@ -0,0 +1,2 @@
type hal_wireless_charger, domain;
type hal_wireless_charger_exec, exec_type, vendor_file_type, file_type;

View file

@ -10,9 +10,6 @@ allow pixelstats_vendor fwk_stats_service:service_manager find;
allow pixelstats_vendor sysfs_scsi_devices_0000:file rw_file_perms; allow pixelstats_vendor sysfs_scsi_devices_0000:file rw_file_perms;
allow pixelstats_vendor sysfs_pixelstats:file r_file_perms; allow pixelstats_vendor sysfs_pixelstats:file r_file_perms;
# Wireless charge
allow pixelstats_vendor sysfs_wlc:dir search;
allow pixelstats_vendor sysfs_wlc:file rw_file_perms;
# Pca charge # Pca charge
allow pixelstats_vendor sysfs_pca:file rw_file_perms; allow pixelstats_vendor sysfs_pca:file rw_file_perms;

View file

@ -1,3 +1,6 @@
type hal_pixel_display_service, service_manager_type, hal_service_type; type hal_pixel_display_service, service_manager_type, hal_service_type;
type hal_uwb_vendor_service, service_manager_type, hal_service_type; type hal_uwb_vendor_service, service_manager_type, hal_service_type;
type edgetpu_dba_service, app_api_service, service_manager_type; type edgetpu_dba_service, app_api_service, service_manager_type;
# WLC
type hal_wireless_charger_service, hal_service_type, protected_service, service_manager_type;

View file

@ -4,3 +4,5 @@ android.hardware.drm.IDrmFactory/widevine u:object_r:hal_drm_se
# EdgeTPU DBA Service # EdgeTPU DBA Service
com.google.edgetpu.dba.IDevice/default u:object_r:edgetpu_dba_service:s0 com.google.edgetpu.dba.IDevice/default u:object_r:edgetpu_dba_service:s0
vendor.google.wireless_charger.IWirelessCharger/default u:object_r:hal_wireless_charger_service:s0

View file

@ -8,4 +8,3 @@ userdebug_or_eng(`
dontaudit shell proc_vendor_sched:dir search; dontaudit shell proc_vendor_sched:dir search;
dontaudit shell proc_vendor_sched:file write; dontaudit shell proc_vendor_sched:file write;
dontaudit shell sysfs_wlc:dir search;