2460cdcc9f
This change removes direct access to the LHBM sysfs node from SystemUI, but allows SystemUI to make binder calls to the hardware composer (HWC), which can be used to enable or disable LHBM. Bug: 191132545 Bug: 190563896 Bug: 184768835 Test: no avc denials Change-Id: I5417377ff096e869ad772e4fd2fb23f8c1fd4f1e
57 lines
1.9 KiB
Text
57 lines
1.9 KiB
Text
#
|
|
# USF sensor HAL SELinux type enforcements.
|
|
#
|
|
|
|
# Allow reading of sensor registry persist files.
|
|
allow hal_sensors_default persist_file:dir search;
|
|
allow hal_sensors_default mnt_vendor_file:dir search;
|
|
r_dir_file(hal_sensors_default, persist_sensor_reg_file)
|
|
|
|
# Allow creation and writing of sensor registry data files.
|
|
allow hal_sensors_default sensor_reg_data_file:dir rw_dir_perms;
|
|
allow hal_sensors_default sensor_reg_data_file:file create_file_perms;
|
|
|
|
# Allow access to the AoC communication driver.
|
|
allow hal_sensors_default aoc_device:chr_file rw_file_perms;
|
|
|
|
# Allow access to the AoC clock and kernel boot time sys FS node. This is needed
|
|
# to synchronize the AP and AoC clock timestamps.
|
|
allow hal_sensors_default sysfs_aoc_boottime:file rw_file_perms;
|
|
|
|
# Allow create thread to watch AOC's device.
|
|
allow hal_sensors_default device:dir r_dir_perms;
|
|
|
|
# Allow access to the files of CDT information.
|
|
r_dir_file(hal_sensors_default, sysfs_chosen)
|
|
|
|
# Allow display_info_service access to the backlight driver.
|
|
allow hal_sensors_default sysfs_leds:dir search;
|
|
allow hal_sensors_default sysfs_leds:file rw_file_perms;
|
|
|
|
# Allow access to the power supply files for MagCC.
|
|
r_dir_file(hal_sensors_default, sysfs_batteryinfo)
|
|
allow hal_sensors_default sysfs_wlc:dir r_dir_perms;
|
|
|
|
# Allow access to sensor service for sensor_listener.
|
|
binder_call(hal_sensors_default, system_server);
|
|
|
|
# Allow access to the sysfs_aoc.
|
|
allow hal_sensors_default sysfs_aoc:dir search;
|
|
allow hal_sensors_default sysfs_aoc:file r_file_perms;
|
|
|
|
# Allow use of the USF low latency transport.
|
|
usf_low_latency_transport(hal_sensors_default)
|
|
|
|
# Allow sensor HAL to reset AOC.
|
|
allow hal_sensors_default sysfs_aoc_reset:file rw_file_perms;
|
|
|
|
#
|
|
# Suez type enforcements.
|
|
#
|
|
|
|
# Allow SensorSuez to connect AIDL stats.
|
|
binder_use(hal_sensors_default);
|
|
allow hal_sensors_default fwk_stats_service:service_manager find;
|
|
|
|
# Allow access to CHRE socket to connect to nanoapps.
|
|
unix_socket_connect(hal_sensors_default, chre, chre)
|