Fix sensors_hal selinux denials.

Bug: 214473093
Bug: 218930975
Bug: 210067282
Test: com.google.android.selinux.pts.SELinuxTest#scanAvcDeniedLogRightAfterReboot
Change-Id: Ifd865efd0544f246d1c188f3edce9f05f27313d2
This commit is contained in:
Robb Glasser 2022-02-18 16:36:37 -08:00
parent 7997d6a8a0
commit 727d070b13
2 changed files with 1 additions and 6 deletions

View file

@ -1,6 +0,0 @@
# b/214473093
dontaudit hal_sensors_default sensor_reg_data_file:file { getattr };
dontaudit hal_sensors_default sensor_reg_data_file:file { open };
dontaudit hal_sensors_default sensor_reg_data_file:file { read };
# b/218930975
dontaudit hal_sensors_default hal_graphics_composer_default:binder { call };

View file

@ -25,6 +25,7 @@ r_dir_file(hal_sensors_default, persist_camera_file)
# Allow creation and writing of sensor registry data files.
allow hal_sensors_default sensor_reg_data_file:dir r_dir_perms;
allow hal_sensors_default sensor_reg_data_file:file r_file_perms;
# Allow access to the display info for ALS.
allow hal_sensors_default sysfs_display:file rw_file_perms;