device_google_gs101/tracking_denials/hal_fingerprint_default.te
Kris Chen e0c6120237 Add sepolicy rules for fingerprint hal
Fix the following avc denial:
avc: denied { set } for property=vendor.gf.cali.state pid=1152 uid=1000 gid=1000 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:vendor_default_prop:s0 tclass=property_service permissive=0'

Bug: 219372997
Bug: 220263520
Test: No above avc denial in logcat.
Change-Id: I93ace30c67e04bc836bfba050028a1f25af641d5
2022-03-01 15:05:42 +08:00

9 lines
487 B
Text

# b/183338543
dontaudit hal_fingerprint_default system_data_root_file:file { read };
dontaudit hal_fingerprint_default default_prop:file { getattr };
dontaudit hal_fingerprint_default default_prop:file { map };
dontaudit hal_fingerprint_default default_prop:file { open };
dontaudit hal_fingerprint_default default_prop:file { read };
dontaudit hal_fingerprint_default system_data_root_file:file { open };
# b/187015705
dontaudit hal_fingerprint_default property_socket:sock_file write;