From 31624072102732ebcd43977dfa3397d1fee63edf Mon Sep 17 00:00:00 2001 From: Kris Chen Date: Wed, 20 Apr 2022 02:38:32 +0800 Subject: [PATCH] Allow hal_fingerprint_default to access hal_pixel_display_service Fix the following avc denial: avc: denied { find } for pid=1158 uid=1000 name=com.google.hardware.pixel.display.IDisplay/default scontext=u:r:hal_fingerprint_default:s0 tcontext=u:object_r:hal_pixel_display_service:s0 tclass=service_manager permissive=0 avc: denied { call } for scontext=u:r:hal_fingerprint_default:s0 tcontext=u:r:hal_graphics_composer_default:s0 tclass=binder permissive=0 Bug: 229716695 Bug: 224573604 Test: build and test fingerprint on device Change-Id: I104af7f50715090fe0c2aa6845848bf77ab3e3ae --- whitechapel_pro/hal_fingerprint_default.te | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/whitechapel_pro/hal_fingerprint_default.te b/whitechapel_pro/hal_fingerprint_default.te index 4a64b22c..ec02f9c4 100644 --- a/whitechapel_pro/hal_fingerprint_default.te +++ b/whitechapel_pro/hal_fingerprint_default.te @@ -26,3 +26,7 @@ allow hal_fingerprint_default sysfs_display:file r_file_perms; # Allow fingerprint to access trusty sysfs allow hal_fingerprint_default sysfs_trusty:file rw_file_perms; + +# Allow fingerprint to access display hal +allow hal_fingerprint_default hal_pixel_display_service:service_manager find; +binder_call(hal_fingerprint_default, hal_graphics_composer_default)