device_google_zuma/vendor/chre.te
Yixuan Wang 7530c4bc13 Add selinux policy for chre vendor data directory
Bug: 278114604
Test: on device test
Change-Id: I1ac96655571f811c116540aec3a1626d5cca1b16
2023-05-30 21:16:26 +00:00

20 lines
597 B
Text

type chre, domain;
type chre_exec, vendor_file_type, exec_type, file_type;
init_daemon_domain(chre)
# Permit communication with AoC
allow chre aoc_device:chr_file rw_file_perms;
# Allow CHRE to determine AoC's current clock
allow chre sysfs_aoc:dir search;
allow chre sysfs_aoc_boottime:file r_file_perms;
# Allow CHRE to write to data to chre data directory
allow chre chre_data_file:dir create_dir_perms;
allow chre chre_data_file:file create_file_perms;
# Allow CHRE to create thread to watch AOC's device
allow chre device:dir r_dir_perms;
# Allow CHRE to use WakeLock
wakelock_use(chre)