Evolution-X-Tensor/device_google_zuma
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[zuma] Update chre sepolicy for socket connection

Browse source 
With multiclient HAL, the socket server domain changes from chre to
hal_contexthub_default.

Bug: 248615564
Test: updated the sepolicies and observed that avc violation logs
      disappears.
Change-Id: I4b2d27b436c9d81bd0d0cdc5b3c1540884c37fec
This commit is contained in:
Lei Ju 2023-12-27 00:01:56 -08:00
parent 09c85a0567
commit 8587126f45
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
vendor/twoshay.te vendored
View file

@ -6,4 +6,6 @@ binder_call(twoshay, hal_radioext_default)
# b/315347346
# b/314721681
unix_socket_connect(twoshay, chre, chre)
# TODO(b/248615564): Remove above rule after CHRE multiclient HAL is launched.
unix_socket_connect(twoshay, chre, hal_contexthub_default)
allow twoshay self:capability2 block_suspend;