sepolicy: allow binder call for hal_power_stats and hal_bluetooth

avc: denied { call } for comm="bluetooth@1.1-s"
scontext=u:r:hal_bluetooth_synabtlinux:s0
tcontext=u:r:hal_power_stats_default:s0 tclass=binder permissive=0

avc: denied { call } for scontext=u:r:hal_bluetooth_synabtlinux:s0
tcontext=u:r:hal_power_stats_default:s0 tclass=binder permissive=1

avc: denied { read } for comm="android.hardwar"
name="u:object_r:boot_status_prop:s0" dev="tmpfs" ino=109
scontext=u:r:hal_bluetooth_synabtlinux:s0
tcontext=u:object_r:boot_status_prop:s0 tclass=file permissive=0

Bug: 215487801 , 262386677
Test: captured bugreport and didn't see powerstats avc denials
Change-Id: I34840b7f8031084270477635c2bde5d702a0507c
Signed-off-by: Darren Hsu <darrenhsu@google.com>
(cherry picked from commit ccd9f49f2b)
This commit is contained in:
Darren Hsu 2022-09-13 10:19:09 +08:00
parent 7e82edd07a
commit 6f45c41a76
2 changed files with 4 additions and 0 deletions

View file

@ -10,6 +10,8 @@ allow hal_bluetooth_synabtlinux hci_attach_dev:chr_file rw_file_perms;
allow hal_bluetooth_synabtlinux hal_power_stats_vendor_service:service_manager find;
add_hwservice(hal_bluetooth_synabtlinux, hal_bluetooth_coexistence_hwservice)
vndbinder_use(hal_bluetooth_synabtlinux)
binder_call(hal_bluetooth_synabtlinux, hal_power_stats_default)
get_prop(hal_bluetooth_synabtlinux, boot_status_prop)
allow hal_bluetooth_synabtlinux sscoredump_vendor_data_crashinfo_file:dir create_dir_perms;
allow hal_bluetooth_synabtlinux sscoredump_vendor_data_crashinfo_file:file create_file_perms;

2
vendor/hal_power_stats_default.te vendored Normal file
View file

@ -0,0 +1,2 @@
# getStateResidency AIDL callback for Bluetooth HAL
binder_call(hal_power_stats_default, hal_bluetooth_synabtlinux)