device_google_zuma/vendor/vendor_init.te
Donnie Pollitz 16440338de Allow vendor_init to fix permissions of TEE data file
Background:
* vendor_init needs to be able to possibly fix ownership of
  tee_data_file

Bug: 280325952
Test: Changed permissions and confirmed user transitions
Change-Id: I2363f9ff695209bbf7b6661c8e9eb3b376b84ace
Signed-off-by: Donnie Pollitz <donpollitz@google.com>
2023-05-24 16:45:28 +02:00

41 lines
1.1 KiB
Text

# Fingerprint property
set_prop(vendor_init, vendor_fingerprint_prop)
# Battery harness mode property
set_prop(vendor_init, vendor_battery_defender_prop)
set_prop(vendor_init, logpersistd_logging_prop)
allow vendor_init proc_dirty:file w_file_perms;
allow vendor_init proc_sched:file w_file_perms;
allow vendor_init sg_device:chr_file r_file_perms;
allow vendor_init bootdevice_sysdev:file create_file_perms;
allow vendor_init modem_img_file:filesystem { getattr };
# Allow for checking NSP permissions
allow vendor_init tee_data_file:lnk_file read;
userdebug_or_eng(`
allow vendor_init vendor_init:lockdown { integrity };
')
# Camera vendor property
set_prop(vendor_init, vendor_camera_prop)
# NFC vendor property
set_prop(vendor_init, vendor_nfc_prop)
# SecureElement vendor property
set_prop(vendor_init, vendor_secure_element_prop)
# USB property
set_prop(vendor_init, vendor_usb_config_prop)
set_prop(vendor_init, vendor_ssrdump_prop)
# Mali
set_prop(vendor_init, vendor_arm_runtime_option_prop)
# ArmNN
set_prop(vendor_init, vendor_armnn_config_prop)
# MM
allow vendor_init proc_watermark_scale_factor:file w_file_perms;