sepolicy : Add policy rules for usta service

As part of making USTA (Sensor android test application) as
installable, we split the app into 2 parts. One Acts as only UI,
another one acts as service which interacts with sensors native
via JNI. Both the apps are placed in system/app path only.

Change-Id: I58df425bebef96b9d6515179e9581eed03571ad6

generic/private/service_contexts

@@ -27,3 +27,4 @@
 qti.ims.ext                                          u:object_r:radio_service:s0
 cneservice                                           u:object_r:cne_service:s0
 uce                                                  u:object_r:uce_service:s0
+com.qualcomm.qti.ustaservice.USTAServiceImpl         u:object_r:usta_app_service:s0

generic/public/service.te

@@ -0,0 +1,27 @@
+# Copyright (c) 2019, The Linux Foundation. All rights reserved.
+#
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions are
+# met:
+#     * Redistributions of source code must retain the above copyright
+#       notice, this list of conditions and the following disclaimer.
+#     * Redistributions in binary form must reproduce the above
+#       copyright notice, this list of conditions and the following
+#       disclaimer in the documentation and/or other materials provided
+#       with the distribution.
+#     * Neither the name of The Linux Foundation nor the names of its
+#       contributors may be used to endorse or promote products derived
+#       from this software without specific prior written permission.
+#
+# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
+# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
+# ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
+# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
+# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
+# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+type usta_app_service,        app_api_service, system_api_service, service_manager_type;

generic/vendor/test/seapp_contexts

@@ -33,3 +33,7 @@ user=system seinfo=platform name=com.qualcomm.qti.usta domain=usta_app type=syst
 
 #Add new domain for qsta app
 user=system seinfo=platform name=com.qualcomm.qti.sensors.qsensortest domain=qsta_app type=system_app_data_file
+
+#Add new domain for ustaservice app
+# Needed for USTA test app
+user=system seinfo=platform name=com.qualcomm.qti.ustaservice domain=ustaservice_app type=system_app_data_file

generic/vendor/test/service.te

@@ -27,4 +27,3 @@
 
 type fidotest_service,        service_manager_type;
 type qseeproxysample_service, service_manager_type;
-

generic/vendor/test/ustaservice_app.te

@@ -0,0 +1,45 @@
+# Copyright (c) 2019, The Linux Foundation. All rights reserved.
+#
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions are
+# met:
+#    * Redistributions of source code must retain the above copyright
+#      notice, this list of conditions and the following disclaimer.
+#    * Redistributions in binary form must reproduce the above
+#      copyright notice, this list of conditions and the following
+#      disclaimer in the documentation and/or other materials provided
+#      with the distribution.
+#    * Neither the name of The Linux Foundation nor the names of its
+#      contributors may be used to endorse or promote products derived
+#      from this software without specific prior written permission.
+#
+# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
+# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
+# ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
+# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
+# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
+# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+type ustaservice_app, domain;
+app_domain(ustaservice_app)
+
+allow ustaservice_app usta_app_service:service_manager add;
+allow ustaservice_app usta_app_service:service_manager find;
+allow ustaservice_app activity_service:service_manager find;
+
+userdebug_or_eng(`
+  allowxperm ustaservice_app self:{ socket qipcrtr_socket } ioctl msm_sock_ipc_ioctls;
+  allow ustaservice_app self:{ socket qipcrtr_socket } create_socket_perms;
+  allow ustaservice_app xdsp_device:chr_file r_file_perms;
+  allow ustaservice_app ssr_device:chr_file r_file_perms;
+')
+
+hwbinder_use(ustaservice_app)
+
+userdebug_or_eng(`
+   diag_use(ustaservice_app)
+')

legacy/vendor/test/domain.te

@@ -64,4 +64,4 @@ allow {system_server
  mediaserver
  cameraserver
  surfaceflinger} system_gles_data_file:file create_file_perms;
-')
+')

legacy/vendor/test/seapp_contexts

@@ -48,3 +48,7 @@ user=_app seinfo=platform name=com.qualcomm.qti.sysmonappExternal domain=sysmon_
 
 #Add new domain for usta app
 user=system seinfo=platform name=com.qualcomm.qti.usta domain=usta_app type=system_app_data_file
+
+#Add new domain for ustaservice app
+# Needed for USTA test app
+user=system seinfo=platform name=com.qualcomm.qti.ustaservice domain=ustaservice_app type=system_app_data_file

legacy/vendor/test/service.te

@@ -27,4 +27,3 @@
 
 type fidotest_service,        service_manager_type;
 type qseeproxysample_service, service_manager_type;
-

legacy/vendor/test/ustaservice_app.te

@@ -0,0 +1,45 @@
+# Copyright (c) 2019, The Linux Foundation. All rights reserved.
+#
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions are
+# met:
+#    * Redistributions of source code must retain the above copyright
+#      notice, this list of conditions and the following disclaimer.
+#    * Redistributions in binary form must reproduce the above
+#      copyright notice, this list of conditions and the following
+#      disclaimer in the documentation and/or other materials provided
+#      with the distribution.
+#    * Neither the name of The Linux Foundation nor the names of its
+#      contributors may be used to endorse or promote products derived
+#      from this software without specific prior written permission.
+#
+# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
+# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
+# ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
+# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
+# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
+# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+type ustaservice_app, domain;
+app_domain(ustaservice_app)
+
+allow ustaservice_app usta_app_service:service_manager add;
+allow ustaservice_app usta_app_service:service_manager find;
+allow ustaservice_app activity_service:service_manager find;
+
+userdebug_or_eng(`
+  allowxperm ustaservice_app self:{ socket qipcrtr_socket } ioctl msm_sock_ipc_ioctls;
+  allow ustaservice_app self:{ socket qipcrtr_socket } create_socket_perms;
+  allow ustaservice_app xdsp_device:chr_file r_file_perms;
+  allow ustaservice_app ssr_device:chr_file r_file_perms;
+')
+
+hwbinder_use(ustaservice_app)
+
+userdebug_or_eng(`
+   diag_use(ustaservice_app)
+')