Update sepolicy for streset and stpreprocess

Allow hal_secure_element_st54spi to access nfc device
Allow hal_nfc_default to set se property
Allow vendor_init to set nfc/se property

Bug: 267838462
Test: manually trigger eSE reset without avc error
Change-Id: I0ad6a0432f4fb158186874b318b5832dddce47e6
This commit is contained in:
George 2023-02-10 00:31:01 +08:00
parent e338667584
commit baa51816de
3 changed files with 10 additions and 0 deletions

View file

@ -1,2 +1,5 @@
# HAL NFC property
get_prop(hal_nfc_default, vendor_nfc_prop)
# SecureElement property
set_prop(hal_nfc_default, vendor_secure_element_prop)

View file

@ -3,4 +3,5 @@ type hal_secure_element_st54spi_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_secure_element_st54spi)
hal_server_domain(hal_secure_element_st54spi, hal_secure_element)
allow hal_secure_element_st54spi st54spi_device:chr_file rw_file_perms;
allow hal_secure_element_st54spi nfc_device:chr_file rw_file_perms;
set_prop(hal_secure_element_st54spi, vendor_secure_element_prop)

View file

@ -17,3 +17,9 @@ set_prop(vendor_init, vendor_audio_prop)
userdebug_or_eng(`
allow vendor_init vendor_init:lockdown { integrity };
')
# NFC vendor property
set_prop(vendor_init, vendor_nfc_prop)
# SecureElement vendor property
set_prop(vendor_init, vendor_secure_element_prop)