Initial aam policy

Change-Id: I81cf99339193df3ed5341fb34e338363cd63fa24
This commit is contained in:
Michael Bestas 2024-06-12 22:03:10 +03:00 committed by Michael Bestas
parent 11a70b26d5
commit 677ebcba05
No known key found for this signature in database
5 changed files with 10 additions and 0 deletions

View file

@ -0,0 +1 @@
/vendor/bin/hw/vendor\.google\.aam-service u:object_r:hal_aam_exec:s0

6
sepolicy/aam/hal_aam.te Normal file
View file

@ -0,0 +1,6 @@
type hal_aam, domain;
type hal_aam_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_aam)
add_service(hal_aam, hal_aam_service)
binder_call(hal_aam, servicemanager);

1
sepolicy/aam/service.te Normal file
View file

@ -0,0 +1 @@
type hal_aam_service, service_manager_type, hal_service_type;

View file

@ -0,0 +1 @@
vendor.google.aam.IAam/default u:object_r:hal_aam_service:s0

View file

@ -10,6 +10,7 @@ BOARD_SEPOLICY_DIRS += \
BOARD_SEPOLICY_DIRS += hardware/google/pixel-sepolicy/googlebattery
# sepolicy that are shared among devices using zumapro
BOARD_SEPOLICY_DIRS += device/google/zumapro/sepolicy/aam
BOARD_SEPOLICY_DIRS += device/google/zumapro/sepolicy/vendor
BOARD_SEPOLICY_DIRS += device/google/zumapro/sepolicy/radio
PRODUCT_PRIVATE_SEPOLICY_DIRS += device/google/zumapro/sepolicy/radio/private