From 997b8974ef445e3eda4ee104ac7fa1a2975affd8 Mon Sep 17 00:00:00 2001 From: Kris Chen Date: Wed, 8 Dec 2021 07:05:51 +0800 Subject: [PATCH] Allow hal_fingerprint_default to access fwk_sensor_hwservice Fix the following avc denial: avc: denied { find } for interface=android.frameworks.sensorservice::ISensorManager sid=u:r:hal_fingerprint_default:s0 pid=1258 scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:fwk_sensor_hwservice:s0 tclass=hwservice_manager permissive=0 Bug: 197789721 Test: build and test fingerprint on device. Change-Id: I7494f28e69e5a1b660dc7fbaa528b1088048723b (cherry picked from commit 9b54bf3665abce7a6f5f5df22069a8ef081ad80e) --- whitechapel_pro/hal_fingerprint_default.te | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/whitechapel_pro/hal_fingerprint_default.te b/whitechapel_pro/hal_fingerprint_default.te index 8cb3ea83..7d5f4f2c 100644 --- a/whitechapel_pro/hal_fingerprint_default.te +++ b/whitechapel_pro/hal_fingerprint_default.te @@ -17,3 +17,7 @@ r_dir_file(hal_fingerprint_default, sysfs_chosen) # Allow fingerprint to access calibration blk device. allow hal_fingerprint_default mfg_data_block_device:blk_file rw_file_perms; allow hal_fingerprint_default block_device:dir search; + +# Allow fingerprint to access fwk_sensor_hwservice +allow hal_fingerprint_default fwk_sensor_hwservice:hwservice_manager find; +