From 58e5a0da266d2a89e480019547d24a53cdb47591 Mon Sep 17 00:00:00 2001
From: eddielan <eddielan@google.com>
Date: Fri, 11 Nov 2022 20:09:32 +0800
Subject: [PATCH] sepolicy: Allow fingerprint to access fwk hwservice

11-11 19:57:30.203   464   464 E SELinux : avc:
denied  { find } for interface=android.frameworks.sensorservice::ISensorManager
sid=u:r:hal_fingerprint_capacitance:s0 pid=903
scontext=u:r:hal_fingerprint_capacitance:s0
tcontext=u:object_r:fwk_sensor_hwservice:s0
tclass=hwservice_manager permissive=0

Bug: 258783592
Test: Build pass
Change-Id: If2185f8f8a095f68ecb70df82c3253f3d5ee32cc
---
 fingerprint_capacitance/hal_fingerprint_capacitance.te | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/fingerprint_capacitance/hal_fingerprint_capacitance.te b/fingerprint_capacitance/hal_fingerprint_capacitance.te
index 8cc623f..6100d44 100644
--- a/fingerprint_capacitance/hal_fingerprint_capacitance.te
+++ b/fingerprint_capacitance/hal_fingerprint_capacitance.te
@@ -26,3 +26,6 @@ allow hal_fingerprint_capacitance input_device:chr_file rw_file_perms;
 # allow fingerprint to access hwservice
 hwbinder_use(hal_fingerprint_capacitance)
 add_hwservice(hal_fingerprint_capacitance, hal_fingerprint_capacitance_ext_hwservice)
+
+# allow fingerprint to access fwk sensor hwservice
+allow hal_fingerprint_capacitance fwk_sensor_hwservice:hwservice_manager find;