1ef0169b1f
E SELinux : avc: denied { find }
name=android.frameworks.sensorservice.ISensorManager/default
scontext=u:r:hal_fingerprint_capacitance:s0
tcontext=u:object_r:fwk_sensor_service:s0
tclass=service_manager permissive=0
Bug: 294959986
Test: make selinux_policy -j128
Change-Id: I987349032bdf7b79e1985a321949987860a08098
39 lines
1.7 KiB
Text
39 lines
1.7 KiB
Text
# hal_fingerprint_capacitance definition
|
|
type hal_fingerprint_capacitance, domain;
|
|
hal_server_domain(hal_fingerprint_capacitance, hal_fingerprint)
|
|
|
|
type hal_fingerprint_capacitance_exec, exec_type, vendor_file_type, file_type;
|
|
init_daemon_domain(hal_fingerprint_capacitance)
|
|
|
|
set_prop(hal_fingerprint_capacitance, vendor_fingerprint_prop)
|
|
|
|
# allow fingerprint to access file
|
|
allow hal_fingerprint_capacitance fingerprint_device:chr_file rw_file_perms;
|
|
allow hal_fingerprint_capacitance tee_device:chr_file rw_file_perms;
|
|
allow hal_fingerprint_capacitance sysfs_fingerprint:dir r_dir_perms;
|
|
allow hal_fingerprint_capacitance sysfs_fingerprint:file rw_file_perms;
|
|
|
|
# allow fingerprint to access power hal
|
|
hal_client_domain(hal_fingerprint_capacitance, hal_power);
|
|
|
|
# allow fingerprint to find fwk service
|
|
allow hal_fingerprint_capacitance fwk_stats_service:service_manager find;
|
|
|
|
# allow fingerprint to access sysfs_leds
|
|
allow hal_fingerprint_capacitance sysfs_leds:dir search;
|
|
allow hal_fingerprint_capacitance sysfs_leds:file rw_file_perms;
|
|
|
|
# allow fingerprint to access sysfs_batteryinfo
|
|
allow hal_fingerprint_capacitance sysfs_batteryinfo:dir search;
|
|
allow hal_fingerprint_capacitance sysfs_batteryinfo:file rw_file_perms;
|
|
|
|
# allow fingerprint to access input_device
|
|
allow hal_fingerprint_capacitance input_device:dir r_dir_perms;
|
|
allow hal_fingerprint_capacitance input_device:chr_file rw_file_perms;
|
|
|
|
# allow fingerprint to access hwservice
|
|
hwbinder_use(hal_fingerprint_capacitance)
|
|
add_hwservice(hal_fingerprint_capacitance, hal_fingerprint_capacitance_ext_hwservice)
|
|
|
|
# allow fingerprint to access fwk sensor hwservice
|
|
allow hal_fingerprint_capacitance fwk_sensor_service:service_manager find;
|