Switch Bluetooth HAL policy to _client/_server
This switches Bluetooth HAL policy to the design which enables us to
conditionally remove unnecessary rules from domains which are clients
of Bluetooth HAL.
Domains which are clients of Bluetooth HAL, such as bluetooth domain,
are granted rules targeting hal_bluetooth only when the Bluetooth HAL
runs in passthrough mode (i.e., inside the client's process). When the
HAL runs in binderized mode (i.e., in another process/domain, with
clients talking to the HAL over HwBinder IPC), rules targeting
hal_bluetooth are not granted to client domains.
Domains which offer a binderized implementation of Bluetooth HAL, such
as hal_bluetooth_default domain, are always granted rules targeting
hal_bluetooth.
Test: Toggle Bluetooth off and on
Test: Pair with another Android, and transfer a file to that Android
over Bluetooth
Test: Pair with a Bluetooth speaker, play music through that
speaker over Bluetooth
Test: Add bluetooth_hidl_hal_test to device.mk, build & add to device,
adb shell stop,
adb shell /data/nativetest64/bluetooth_hidl_hal_test/bluetooth_hidl_hal_test
Bug: 34170079
Change-Id: I05c3ccf1e98cbbc1450a81bb1000c4fb75eb8a83
2017-02-17 05:14:56 +01:00
|
|
|
# HwBinder IPC from clients into server, and callbacks
|
|
|
|
|
binder_call(hal_bluetooth_client, hal_bluetooth_server)
|
|
|
|
|
binder_call(hal_bluetooth_server, hal_bluetooth_client)
|
2016-10-12 23:49:56 +02:00
|
|
|
|
|
|
|
|
wakelock_use(hal_bluetooth);
|
|
|
|
|
|
2017-02-22 20:50:20 +01:00
|
|
|
# The HAL toggles rfkill to power the chip off/on.
|
|
|
|
|
allow hal_bluetooth self:capability net_admin;
|
|
|
|
|
|
2016-10-12 23:49:56 +02:00
|
|
|
# bluetooth factory file accesses.
|
|
|
|
|
r_dir_file(hal_bluetooth, bluetooth_efs_file)
|
|
|
|
|
|
|
|
|
|
allow hal_bluetooth { uhid_device hci_attach_dev }:chr_file rw_file_perms;
|
|
|
|
|
|
|
|
|
|
# sysfs access.
|
|
|
|
|
r_dir_file(hal_bluetooth, sysfs_type)
|
|
|
|
|
allow hal_bluetooth sysfs_bluetooth_writable:file rw_file_perms;
|
|
|
|
|
allow hal_bluetooth self:capability2 wake_alarm;
|
|
|
|
|
|
|
|
|
|
# Allow write access to bluetooth-specific properties
|
|
|
|
|
set_prop(hal_bluetooth, bluetooth_prop)
|
2017-02-08 05:30:40 +01:00
|
|
|
|
|
|
|
|
# /proc access (bluesleep etc.).
|
|
|
|
|
allow hal_bluetooth proc_bluetooth_writable:file rw_file_perms;
|
