[DO NOT MERGE] Add sepolicy for procfs_touch_gti type

Bug: 262796907
Test: TreeHugger build pass.
Change-Id: I2b89aa6e0e9b8fbe42121f34e4c70639bdc225d2
This commit is contained in:
Super Liu 2022-12-23 02:21:50 +00:00
parent f5a88c35a4
commit 946b7e5e36
4 changed files with 7 additions and 0 deletions

View file

@ -112,8 +112,10 @@ type sysfs_usbc_throttling_stats, sysfs_type, fs_type;
# Touch
type proc_touch, proc_type, fs_type;
type proc_touch_gti, proc_type, fs_type;
userdebug_or_eng(`
typeattribute proc_touch mlstrustedobject;
typeattribute proc_touch_gti mlstrustedobject;
')
# Vendor sched files

View file

@ -31,6 +31,7 @@ genfscon sysfs /devices/soc0/revision u
genfscon sysfs /devices/platform/10d10000.spi/spi_master/spi0/spi0.0/synaptics_tcm.0/sysfs u:object_r:sysfs_touch:s0
genfscon sysfs /devices/virtual/sec/tsp u:object_r:sysfs_touch:s0
genfscon proc /focaltech_touch u:object_r:proc_touch:s0
genfscon proc /goog_touch_interface u:object_r:proc_touch_gti:s0
# tracefs
genfscon tracefs /events/dmabuf_heap/dma_heap_stat u:object_r:debugfs_tracing:s0

View file

@ -8,4 +8,5 @@ userdebug_or_eng(`
allow google_touch_app sysfs_touch:dir r_dir_perms;
allow google_touch_app sysfs_touch:file rw_file_perms;
allow google_touch_app proc_touch:file rw_file_perms;
allow google_touch_app proc_touch_gti:file rw_file_perms;
')

View file

@ -84,6 +84,9 @@ allow hal_dumpstate_default sysfs_touch:file rw_file_perms;
allow hal_dumpstate_default proc_touch:dir r_dir_perms;
allow hal_dumpstate_default proc_touch:file rw_file_perms;
allow hal_dumpstate_default proc_touch_gti:dir r_dir_perms;
allow hal_dumpstate_default proc_touch_gti:file rw_file_perms;
allow hal_dumpstate_default vendor_displaycolor_service:service_manager find;
binder_call(hal_dumpstate_default, hal_graphics_composer_default);
allow hal_dumpstate_default sysfs_display:dir r_dir_perms;