Merge "Add sepolicy to support lights HAL" into tm-qpr-dev

This commit is contained in:
TreeHugger Robot 2022-07-06 04:46:25 +00:00 committed by Android (Google) Code Review
commit 32185368bd
4 changed files with 14 additions and 0 deletions

2
vendor/file.te vendored Normal file
View file

@ -0,0 +1,2 @@
# Privacy LED
type persist_leds_file, file_type, vendor_persist_type;

View file

@ -6,3 +6,7 @@
# Wifi
/dev/wlan u:object_r:vendor_wlan_device:s0
# Privacy LED
/vendor/bin/hw/android\.hardware\.lights-service\.tangorpro u:object_r:hal_light_default_exec:s0
/mnt/vendor/persist/led(/.*)? u:object_r:persist_leds_file:s0

View file

@ -14,3 +14,6 @@ genfscon proc /nvt_selftest u:object_
# system suspend wakeup files
genfscon sysfs /devices/platform/google,dock/power_supply/dock/wakeup u:object_r:sysfs_wakeup:s0
# Privacy LED
genfscon sysfs /devices/platform/pwmleds/leds/green/brightness u:object_r:sysfs_leds:s0

5
vendor/hal_lights.te vendored Normal file
View file

@ -0,0 +1,5 @@
allow hal_light_default sysfs_leds:dir search;
allow hal_light_default sysfs_leds:file rw_file_perms;
allow hal_light_default mnt_vendor_file:dir search;
allow hal_light_default persist_file:dir search;
r_dir_file(hal_light_default, persist_leds_file);