device_google_gs101/whitechapel/vendor/google/rlsservice.te
Cheng Gu 72011a8a87 gs101-sepolicy: Allow rlsservice to access range sensor
Fix: 184295618
Test: rlsservice_test
Change-Id: Iee4cc5376e0eb67e75ae94cd15b5211a7ec819ef
2021-04-02 22:27:48 +00:00

24 lines
729 B
Text

type rlsservice, domain;
type rlsservice_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(rlsservice)
vndbinder_use(rlsservice)
add_service(rlsservice, rls_service)
# access rainbow sensor calibration files
allow rlsservice persist_file:dir search;
allow rlsservice persist_camera_file:dir search;
allow rlsservice persist_camera_file:file r_file_perms;
allow rlsservice mnt_vendor_file:dir search;
# access device files
allow rlsservice rls_device:chr_file rw_file_perms;
binder_call(rlsservice, hal_sensors_default)
binder_call(rlsservice, hal_camera_default)
# Allow access to always-on compute device node
allow rlsservice device:dir { read watch };
allow rlsservice aoc_device:chr_file rw_file_perms;