Bug: 208909060 Bug: 219660742 Bug: 219660741 Test: check dmeg and search "avc: denied { search } for comm="id.hardwareinfo" vendor_maxfg_debugfs avc gone after apply patch Change-Id: I3399e696b59218e62c4d1adcc2a12f5d6ee5c8cc Signed-off-by: Denny cy Lee <dennycylee@google.com>
29 lines
852 B
Text
29 lines
852 B
Text
type hardware_info_app, domain;
|
|
app_domain(hardware_info_app)
|
|
|
|
allow hardware_info_app app_api_service:service_manager find;
|
|
|
|
# Storage
|
|
allow hardware_info_app sysfs_scsi_devices_0000:dir search;
|
|
allow hardware_info_app sysfs_scsi_devices_0000:file r_file_perms;
|
|
|
|
# Audio
|
|
allow hardware_info_app sysfs_pixelstats:file r_file_perms;
|
|
|
|
# Batteryinfo
|
|
allow hardware_info_app sysfs_batteryinfo:dir search;
|
|
allow hardware_info_app sysfs_batteryinfo:file r_file_perms;
|
|
|
|
# Display
|
|
allow hardware_info_app sysfs_display:dir search;
|
|
allow hardware_info_app sysfs_display:file r_file_perms;
|
|
|
|
# SoC
|
|
allow hardware_info_app sysfs_soc:file r_file_perms;
|
|
allow hardware_info_app sysfs_chip_id:file r_file_perms;
|
|
|
|
# Fuel
|
|
userdebug_or_eng(`
|
|
allow hardware_info_app vendor_maxfg_debugfs:dir search;
|
|
allow hardware_info_app vendor_maxfg_debugfs:file r_file_perms;
|
|
')
|