Update SELinux policies for rlsservice

1. Move rls_service context from vndservice_contexts to
   service_contexts.
2. Allow binder calls from rlsservice to servicemanager
3. Change rls_service type from vndservice_manager_type to
   service_manager_type.

Bug: 301520085
Test: GCA
Change-Id: Ief845b5691487f48d570c531de1ea99945087e42
This commit is contained in:
JimiChen 2023-10-27 19:45:33 +08:00 committed by Treehugger Robot
parent 435e0aafa8
commit 4f1d96210d
5 changed files with 6 additions and 2 deletions

View file

@ -16,6 +16,8 @@ allow rlsservice mnt_vendor_file:dir search;
allow rlsservice rls_device:chr_file rw_file_perms; allow rlsservice rls_device:chr_file rw_file_perms;
binder_call(rlsservice, hal_camera_default) binder_call(rlsservice, hal_camera_default)
binder_call(rlsservice, servicemanager)
# Allow access to display backlight information # Allow access to display backlight information
allow rlsservice sysfs_leds:dir search; allow rlsservice sysfs_leds:dir search;

View file

@ -3,3 +3,5 @@ type hal_uwb_vendor_service, service_manager_type, hal_service_type;
# WLC # WLC
type hal_wireless_charger_service, hal_service_type, protected_service, service_manager_type; type hal_wireless_charger_service, hal_service_type, protected_service, service_manager_type;
type rls_service, service_manager_type;

View file

@ -2,3 +2,5 @@ com.google.hardware.pixel.display.IDisplay/default u:object_r:hal_pixel_
hardware.qorvo.uwb.IUwbVendor/default u:object_r:hal_uwb_vendor_service:s0 hardware.qorvo.uwb.IUwbVendor/default u:object_r:hal_uwb_vendor_service:s0
vendor.google.wireless_charger.IWirelessCharger/default u:object_r:hal_wireless_charger_service:s0 vendor.google.wireless_charger.IWirelessCharger/default u:object_r:hal_wireless_charger_service:s0
rlsservice u:object_r:rls_service:s0

View file

@ -1,3 +1,2 @@
type rls_service, vndservice_manager_type;
type vendor_surfaceflinger_vndservice, vndservice_manager_type; type vendor_surfaceflinger_vndservice, vndservice_manager_type;
type eco_service, vndservice_manager_type; type eco_service, vndservice_manager_type;

View file

@ -1,3 +1,2 @@
rlsservice u:object_r:rls_service:s0
Exynos.HWCService u:object_r:vendor_surfaceflinger_vndservice:s0 Exynos.HWCService u:object_r:vendor_surfaceflinger_vndservice:s0
media.ecoservice u:object_r:eco_service:s0 media.ecoservice u:object_r:eco_service:s0