sepolicy: Allow PixelGnss to connect to Chre HAL

avc:  denied  { call } for  scontext=u:r:hal_contexthub_default:s0 tcontext=u:r:hal_gnss_pixel:s0 tclass=binder permissive=0

Bug: 316227249
Test: Verify PixelGnss HAL can connect to Chre HAL.
Test: Function test verification b/330120749 without disable selinux.
Test: No avc error log in logcat.
Change-Id: I7f6a45cd80c7ccbba2af1a0d3f3d89f30267db00
This commit is contained in:
Cheng Chang 2024-03-18 10:28:58 +00:00
parent d0b2833cac
commit 79e12fe426

6
vendor/hal_contexthub_default.te vendored Normal file
View file

@ -0,0 +1,6 @@
#
# Context hub multiclient HAL common selinux policies
#
# Allow binder call to PixelGnss PPS function.
binder_call(hal_contexthub_default, hal_gnss_pixel)