Merge "Add sepolicy to support lights HAL" into tm-qpr-dev am: 32185368bd

Original change: https://googleplex-android-review.googlesource.com/c/device/google/tangorpro-sepolicy/+/18796908

Change-Id: I636c0959fff8cd7d92911953258d6441d18dfa7f
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
TreeHugger Robot 2022-07-06 05:05:50 +00:00 committed by Automerger Merge Worker
commit eabc4b8ffa
4 changed files with 14 additions and 0 deletions

2
vendor/file.te vendored Normal file
View file

@ -0,0 +1,2 @@
# Privacy LED
type persist_leds_file, file_type, vendor_persist_type;

View file

@ -6,3 +6,7 @@
# Wifi # Wifi
/dev/wlan u:object_r:vendor_wlan_device:s0 /dev/wlan u:object_r:vendor_wlan_device:s0
# Privacy LED
/vendor/bin/hw/android\.hardware\.lights-service\.tangorpro u:object_r:hal_light_default_exec:s0
/mnt/vendor/persist/led(/.*)? u:object_r:persist_leds_file:s0

View file

@ -14,3 +14,6 @@ genfscon proc /nvt_selftest u:object_
# system suspend wakeup files # system suspend wakeup files
genfscon sysfs /devices/platform/google,dock/power_supply/dock/wakeup u:object_r:sysfs_wakeup:s0 genfscon sysfs /devices/platform/google,dock/power_supply/dock/wakeup u:object_r:sysfs_wakeup:s0
# Privacy LED
genfscon sysfs /devices/platform/pwmleds/leds/green/brightness u:object_r:sysfs_leds:s0

5
vendor/hal_lights.te vendored Normal file
View file

@ -0,0 +1,5 @@
allow hal_light_default sysfs_leds:dir search;
allow hal_light_default sysfs_leds:file rw_file_perms;
allow hal_light_default mnt_vendor_file:dir search;
allow hal_light_default persist_file:dir search;
r_dir_file(hal_light_default, persist_leds_file);