From 24d426e003d3d8eb089a1b1aaa54ef406e6b96bf Mon Sep 17 00:00:00 2001 From: Chungjui Fan Date: Wed, 8 Jun 2022 21:55:56 +0800 Subject: [PATCH] Add sepolicy to support lights HAL Bug: 230288032 Test: atest VtsHalLightTargetTest Change-Id: I4fd54341d4ef6a91cb84f0881725985f05abf2d5 --- vendor/file.te | 2 ++ vendor/file_contexts | 4 ++++ vendor/genfs_contexts | 3 +++ vendor/hal_lights.te | 5 +++++ 4 files changed, 14 insertions(+) create mode 100644 vendor/file.te create mode 100644 vendor/hal_lights.te diff --git a/vendor/file.te b/vendor/file.te new file mode 100644 index 0000000..61f075b --- /dev/null +++ b/vendor/file.te @@ -0,0 +1,2 @@ +# Privacy LED +type persist_leds_file, file_type, vendor_persist_type; diff --git a/vendor/file_contexts b/vendor/file_contexts index 46faec0..67ce2c0 100644 --- a/vendor/file_contexts +++ b/vendor/file_contexts @@ -10,3 +10,7 @@ # Wifi /dev/wlan u:object_r:vendor_wlan_device:s0 + +# Privacy LED +/vendor/bin/hw/android\.hardware\.lights-service\.tangorpro u:object_r:hal_light_default_exec:s0 +/mnt/vendor/persist/led(/.*)? u:object_r:persist_leds_file:s0 diff --git a/vendor/genfs_contexts b/vendor/genfs_contexts index eb64267..c72c5db 100644 --- a/vendor/genfs_contexts +++ b/vendor/genfs_contexts @@ -14,3 +14,6 @@ genfscon proc /nvt_selftest u:object_ # system suspend wakeup files genfscon sysfs /devices/platform/google,dock/power_supply/dock/wakeup u:object_r:sysfs_wakeup:s0 + +# Privacy LED +genfscon sysfs /devices/platform/pwmleds/leds/green/brightness u:object_r:sysfs_leds:s0 diff --git a/vendor/hal_lights.te b/vendor/hal_lights.te new file mode 100644 index 0000000..ac536de --- /dev/null +++ b/vendor/hal_lights.te @@ -0,0 +1,5 @@ +allow hal_light_default sysfs_leds:dir search; +allow hal_light_default sysfs_leds:file rw_file_perms; +allow hal_light_default mnt_vendor_file:dir search; +allow hal_light_default persist_file:dir search; +r_dir_file(hal_light_default, persist_leds_file);