device_google_gs201/whitechapel_pro/platform_app.te
Amith Dsouza be2e1b2ede Fix untracked SELinux denials on boot
Error:
avc:  denied  { find } for interface=vendor.samsung_slsi.telephony.hardware.radioExternal::IOemSlsiRadioExternal sid=u:r:platform_app:s0:c512,c768 pid=2641 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:hal_exynos_rild_hwservice:s0 tclass=hwservice_manager permissive=0

Bug: 254453654
Test: Flash device, rebuild driver blobs, check logs after boot

Change-Id: I43d524f781c1dda1d3d5291f661bc549fdbb99d6
2022-11-02 00:55:45 +00:00

19 lines
704 B
Text

binder_call(platform_app, rild)
allow platform_app hal_exynos_rild_hwservice:hwservice_manager find;
allow platform_app hal_pixel_display_service:service_manager find;
allow platform_app hal_wlc_hwservice:hwservice_manager find;
allow platform_app nfc_service:service_manager find;
allow platform_app proc_vendor_sched:dir r_dir_perms;
allow platform_app proc_vendor_sched:file w_file_perms;
# Fingerprint (UDFPS) GHBM/LHBM toggle
get_prop(platform_app, fingerprint_ghbm_prop)
# allow systemui to set boot animation colors
set_prop(platform_app, bootanim_system_prop);
binder_call(platform_app, hal_wlc)
# allow udfps of systemui access lhbm
binder_call(platform_app, hal_graphics_composer_default)