device_google_zuma/vendor/twoshay.te
Lei Ju 8587126f45 [zuma] Update chre sepolicy for socket connection
With multiclient HAL, the socket server domain changes from chre to
hal_contexthub_default.

Bug: 248615564
Test: updated the sepolicies and observed that avc violation logs
      disappears.
Change-Id: I4b2d27b436c9d81bd0d0cdc5b3c1540884c37fec
2023-12-27 00:02:57 -08:00

11 lines
371 B
Text

# Allow ITouchContextService callback
binder_call(twoshay, systemui_app)
binder_call(twoshay, hal_radioext_default)
# b/315347346
# b/314721681
unix_socket_connect(twoshay, chre, chre)
# TODO(b/248615564): Remove above rule after CHRE multiclient HAL is launched.
unix_socket_connect(twoshay, chre, hal_contexthub_default)
allow twoshay self:capability2 block_suspend;