Add sepolicy rules for fastboot AIDL service

Bug: 205760652
Test: Build & Flash

Change-Id: I02fe5ca6c0276fd08cf5127b7d8b7313374f0cfe
Signed-off-by: Sandeep Dhavale <dhavale@google.com>
This commit is contained in:
Sandeep Dhavale 2022-11-08 23:32:50 +00:00
parent be2e1b2ede
commit 25ea0f418a

View file

@ -0,0 +1,18 @@
binder_use(hal_fastboot_default)
# For get-off-mode charge state
allow hal_fastboot_default devinfo_block_device:blk_file { open read };
allow hal_fastboot_default kmsg_device:chr_file { open write };
# For dev/block/by-name dir
allow hal_fastboot_default block_device:dir r_dir_perms;
allow hal_fastboot_default tmpfs:dir rw_dir_perms;
allow hal_fastboot_default rootfs:dir r_dir_perms;
# For set-brightness
allow hal_fastboot_default sysfs_leds:dir search;
allow hal_fastboot_default sysfs_leds:file rw_file_perms;
allow hal_fastboot_default sysfs_leds:lnk_file read;
allow hal_fastboot_default citadel_device:chr_file getattr;