diff --git a/legacy/whitechapel_pro/device.te b/legacy/whitechapel_pro/device.te index bf6f21ca..7d31940a 100644 --- a/legacy/whitechapel_pro/device.te +++ b/legacy/whitechapel_pro/device.te @@ -2,6 +2,3 @@ type sg_device, dev_type; type vendor_toe_device, dev_type; type lwis_device, dev_type; type rls_device, dev_type; - -# Raw HID device -type hidraw_device, dev_type; diff --git a/legacy/whitechapel_pro/file_contexts b/legacy/whitechapel_pro/file_contexts index a9901c05..f0570fd1 100644 --- a/legacy/whitechapel_pro/file_contexts +++ b/legacy/whitechapel_pro/file_contexts @@ -48,6 +48,3 @@ # Persist /mnt/vendor/persist/sensors/registry(/.*)? u:object_r:persist_sensor_reg_file:s0 /mnt/vendor/persist/uwb(/.*)? u:object_r:persist_uwb_file:s0 - -# Raw HID device -/dev/hidraw[0-9]* u:object_r:hidraw_device:s0 diff --git a/vendor/device.te b/vendor/device.te index 695c54fe..0c93859c 100644 --- a/vendor/device.te +++ b/vendor/device.te @@ -20,3 +20,6 @@ type st54spi_device, dev_type; # OTA type sda_block_device, dev_type; + +# Raw HID device +type hidraw_device, dev_type; diff --git a/vendor/file_contexts b/vendor/file_contexts index 56fdc67d..14b49d0f 100644 --- a/vendor/file_contexts +++ b/vendor/file_contexts @@ -179,3 +179,6 @@ /dev/dma_heap/vscaler-secure u:object_r:vscaler_secure_heap_device:s0 /dev/dma_heap/vstream-secure u:object_r:dmabuf_system_secure_heap_device:s0 /dev/uci u:object_r:uci_device:s0 + +# Raw HID device +/dev/hidraw[0-9]* u:object_r:hidraw_device:s0 diff --git a/vendor/hal_sensors_default.te b/vendor/hal_sensors_default.te index b9f6a72b..51ab1fbf 100644 --- a/vendor/hal_sensors_default.te +++ b/vendor/hal_sensors_default.te @@ -46,6 +46,9 @@ binder_call(hal_sensors_default, system_server); # Allow access for dynamic sensor properties. get_prop(hal_sensors_default, vendor_dynamic_sensor_prop) +# Allow access to raw HID devices for dynamic sensors. +allow hal_sensors_default hidraw_device:chr_file rw_file_perms; + # Allow access to the display info for ALS. allow hal_sensors_default sysfs_display:file rw_file_perms;