1fefc4e6de
Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/20407807 Change-Id: I8ced56e90a34167048d5e56153081c9ca2583aa9 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
31 lines
993 B
Text
31 lines
993 B
Text
type chre, domain;
|
|
type chre_exec, vendor_file_type, exec_type, file_type;
|
|
init_daemon_domain(chre)
|
|
|
|
# Permit communication with AoC
|
|
allow chre aoc_device:chr_file rw_file_perms;
|
|
|
|
# Allow CHRE to determine AoC's current clock
|
|
allow chre sysfs_aoc:dir search;
|
|
allow chre sysfs_aoc_boottime:file r_file_perms;
|
|
|
|
# Allow CHRE to create thread to watch AOC's device
|
|
allow chre device:dir r_dir_perms;
|
|
|
|
# Allow CHRE to use the USF low latency transport
|
|
usf_low_latency_transport(chre)
|
|
|
|
# Allow CHRE to talk to the WiFi HAL
|
|
allow chre hal_wifi_ext:binder { call transfer };
|
|
allow chre hal_wifi_ext_hwservice:hwservice_manager find;
|
|
allow chre hal_wifi_ext_service:service_manager find;
|
|
|
|
# Allow CHRE host to talk to stats service
|
|
allow chre fwk_stats_service:service_manager find;
|
|
binder_call(chre, stats_service_server)
|
|
|
|
# Allow CHRE to use WakeLock
|
|
wakelock_use(chre)
|
|
|
|
# Allow CHRE to block suspend, which is required to use EPOLLWAKEUP.
|
|
allow chre self:global_capability2_class_set block_suspend;
|