Merge "qva: Add sepolicy support for myftm service and IWifiMyFtm HAL."

qva/vendor/test/file_contexts

@@ -32,3 +32,6 @@
 /vendor/bin/init\.debug\.script\.sh                                 u:object_r:vendor-qti-testscripts_exec:s0
 /vendor/bin/init.myam.sh                                            u:object_r:vendor-qti-testscripts_exec:s0
 /(vendor|system/vendor)/bin/hw/vendor\.qti\.hardware\.debugutils@1\.0-service        u:object_r:vendor_hal_debugutils_default_exec:s0
+
+#wifimyftm daemon
+/(vendor|system/vendor)/bin/wifimyftm    u:object_r:vendor_wifimyftmsvc_exec:s0

qva/vendor/test/hwservice.te

@@ -28,3 +28,4 @@
 
 type vendor_qtiloopback_hwservice , hwservice_manager_type, protected_hwservice;
 type hal_debugutils_hwservice, hwservice_manager_type;
+type vendor_hal_wifimyftm_hwservice, hwservice_manager_type, protected_hwservice;

qva/vendor/test/hwservice_contexts

@@ -27,3 +27,4 @@
 
 com.qualcomm.qti.loopbackhal::Iloopback                      u:object_r:vendor_qtiloopback_hwservice:s0
 vendor.qti.hardware.servicetracker::IDebugUtils              u:object_r:hal_debugutils_hwservice:s0
+vendor.qti.hardware.wifi.myftmhal::IWifiMyFtm                u:object_r:vendor_hal_wifimyftm_hwservice:s0

qva/vendor/test/system_server.te

@@ -25,4 +25,12 @@
 # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
 # IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
+# This domain is for ftm mode hal service and  always will be in
+# userdebug_or_eng macro
+
+userdebug_or_eng(`
 allow system_server vendor_binder_state:file r_file_perms;
+
+# allow system_server to access IMyFtm HAL service
+hal_client_domain(system_server, vendor_hal_wifimyftm);
+')

qva/vendor/test/wifimyftmsvc.te

@@ -0,0 +1,46 @@
+# Copyright (c) 2020, The Linux Foundation. All rights reserved.
+#
+# Redistribution and use in source and binary forms, with or without
+# modification, are permitted provided that the following conditions are
+# met:
+#    * Redistributions of source code must retain the above copyright
+#      notice, this list of conditions and the following disclaimer.
+#    * Redistributions in binary form must reproduce the above
+#      copyright notice, this list of conditions and the following
+#      disclaimer in the documentation and/or other materials provided
+#      with the distribution.
+#    * Neither the name of The Linux Foundation nor the names of its
+#      contributors may be used to endorse or promote products derived
+#      from this software without specific prior written permission.
+#
+# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY EXPRESS OR IMPLIED
+# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT
+# ARE DISCLAIMED.  IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
+# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
+# BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
+# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
+# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
+# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+# This domain is for ftm mode hal service and  always will be in
+# userdebug_or_eng macro
+
+userdebug_or_eng(`
+type vendor_wifimyftmsvc, domain;
+type vendor_wifimyftmsvc_exec, exec_type, vendor_file_type, file_type;
+
+init_daemon_domain(vendor_wifimyftmsvc)
+hal_server_domain(vendor_wifimyftmsvc, vendor_hal_wifimyftm)
+
+#allows calls between client and server and vice-versa
+binder_call(vendor_hal_wifimyftm_client, vendor_hal_wifimyftm_server)
+binder_call(vendor_hal_wifimyftm_server, vendor_hal_wifimyftm_client)
+
+#register hal service and allow hal clients to find the service
+hal_attribute_hwservice(vendor_hal_wifimyftm, vendor_hal_wifimyftm_hwservice)
+
+allow vendor_hal_wifimyftm self:netlink_generic_socket create_socket_perms_no_ioctl;
+')