Evolution-X-Tensor/device_google_zuma
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Revise sepolicy because of refactor HbmSvManager

Browse source 
1. Set sepolicy correctly, make it the same as gs201.
2. Rename hbmsvmanager to pixeldisplayservice due to refactor.
3. Add arm_mali_platform_service for pixeldisplayservcice

Bug: 241498235
Bug: 262794939
Bug: 263185136
Bug: 264489797
Test: Verify LBE and shadow compensation functions.
      Make sure there is no avc denied.
Change-Id: I2a4bb5d6b863edc00b789fd6df8d46f90164d9f2
This commit is contained in:
Amy Hsu 2022-12-06 06:20:23 +00:00
parent 6747816919
commit c186dbd6db
4 changed files with 16 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

8
tracking_denials/hbmsvmanager_app.te
View file

@ -1,8 +0,0 @@
# b/262794939
dontaudit hbmsvmanager_app hal_pixel_display_service:service_manager { find };
# b/263185136
dontaudit hbmsvmanager_app hal_graphics_composer_default:binder { call };
# b/264489797
userdebug_or_eng(`
permissive hbmsvmanager_app;
')

6
vendor/hbmsvmanager_app.te vendored
View file

@ -1,6 +0,0 @@
type hbmsvmanager_app, domain;
app_domain(hbmsvmanager_app);
# Standard system services
allow hbmsvmanager_app app_api_service:service_manager find;

14
vendor/pixeldisplayservice_app.te vendored Normal file
View file

@ -0,0 +1,14 @@
type pixeldisplayservice_app, domain, coredomain;
app_domain(pixeldisplayservice_app);
allow pixeldisplayservice_app proc_vendor_sched:dir r_dir_perms;
allow pixeldisplayservice_app proc_vendor_sched:file w_file_perms;
allow pixeldisplayservice_app hal_pixel_display_service:service_manager find;
binder_call(pixeldisplayservice_app, hal_graphics_composer_default)
# Standard system services
allow pixeldisplayservice_app app_api_service:service_manager find;
allow pixeldisplayservice_app cameraserver_service:service_manager find;

4
vendor/seapp_contexts vendored
View file

@ -10,8 +10,8 @@ user=_app isPrivApp=true seinfo=platform name=com.thales.device.ofl.app.omapi_a
# Domain for connectivity monitor # Domain for connectivity monitor
user=_app isPrivApp=true seinfo=platform name=com.google.android.connectivitymonitor domain=con_monitor_app type=app_data_file levelFrom=all user=_app isPrivApp=true seinfo=platform name=com.google.android.connectivitymonitor domain=con_monitor_app type=app_data_file levelFrom=all
# HbmSVManager # PixelDisplayService
user=_app seinfo=platform name=com.android.hbmsvmanager domain=hbmsvmanager_app type=app_data_file levelFrom=all user=_app seinfo=platform name=com.android.pixeldisplayservice domain=pixeldisplayservice_app type=app_data_file levelFrom=all
# Google Camera # Google Camera
user=_app isPrivApp=true seinfo=google name=com.google.android.GoogleCamera domain=google_camera_app type=app_data_file levelFrom=all user=_app isPrivApp=true seinfo=google name=com.google.android.GoogleCamera domain=google_camera_app type=app_data_file levelFrom=all