fix hal_fingerprint_default denails

10-25 11:19:03.649   430   430 E SELinux : avc:  denied  { find } for pid=958 uid=1000 name=android.hardware.power.IPower/default scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:hal_power_service:s0 tclass=service_manager permissive=1
10-25 11:19:04.509   430   430 E SELinux : avc:  denied  { find } for pid=958 uid=1000 name=android.frameworks.stats.IStats/default scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:fwk_stats_service:s0 tclass=service_manager permissive=1
Bug: 202906981
Test: boot with no fingerprint errors

Change-Id: I95dcda0698c7fcec1e4874b95b598bc987e83e58
This commit is contained in:
Adam Shih 2021-10-25 11:24:26 +08:00
parent 9cb1f625ba
commit be8aedd6ac
2 changed files with 5 additions and 4 deletions

View file

@ -1,4 +0,0 @@
# b/202906981
dontaudit hal_fingerprint_default block_device:dir { search };
dontaudit hal_fingerprint_default hal_fingerprint_ext_hwservice:hwservice_manager { add };
dontaudit hal_fingerprint_default hal_fingerprint_ext_hwservice:hwservice_manager { find };

View file

@ -0,0 +1,5 @@
hal_client_domain(hal_fingerprint_default, hal_power)
add_hwservice(hal_fingerprint_default, hal_fingerprint_ext_hwservice)
allow hal_fingerprint_default fwk_stats_service:service_manager find;
allow hal_fingerprint_default block_device:dir search;