tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
platform_system_sepolicy/private/hal_usb_gadget.te

20 lines
834 B
Text
Raw Normal View History

hal_usb_gadget sepolicy Bug: 63669128 Test: Checked for avc denail messages. Change-Id: I057b3cf9ccc945cb943b9cf60fc9cd6c023eddda Merged-In: I057b3cf9ccc945cb943b9cf60fc9cd6c023eddda
2018-01-08 18:29:40 +01:00
# HwBinder IPC from client to server, and callbacks
binder_call(hal_usb_gadget_client, hal_usb_gadget_server)
binder_call(hal_usb_gadget_server, hal_usb_gadget_client)
Add selinux rules for android.hardware.usb.gadget.IUsbGadget AIDL migration Covers the rules needed for the default AIDL implementation. 10-26 10:22:42.408 448 448 I auditd : type=1400 audit(0.0:95): avc: denied { read } for comm="android.hardwar" name="interrupts" dev="proc" ino=4026531995 scontext=u:r:hal_usb_gadget_default:s0 tcontext=u:object_r:proc_interrupts:s0 tclass=file permissive=0 Bug: 218791946 Test: reboot and check if AIDL service is running. Signed-off-by: Ricky Niu <rickyniu@google.com> Change-Id: I8bdab3a682398f3c7e825a8894f45af2a9b6c199
2022-09-28 11:53:48 +02:00
hal_attribute_service(hal_usb_gadget, hal_usb_gadget_service)
binder_call(hal_usb_gadget_server, servicemanager)
hal_attribute_hwservice_client drop '_client' Since this attribute just associates a hal_attribute with a given hwservice in the standard way. Bug: 80319537 Test: boot + sanity + test for denials Change-Id: I545de165515387317e6920ce8f5e8c491f9ab24e
2018-06-06 18:30:18 +02:00
hal_attribute_hwservice(hal_usb_gadget, hal_usb_gadget_hwservice)
hal_usb_gadget sepolicy Bug: 63669128 Test: Checked for avc denail messages. Change-Id: I057b3cf9ccc945cb943b9cf60fc9cd6c023eddda Merged-In: I057b3cf9ccc945cb943b9cf60fc9cd6c023eddda
2018-01-08 18:29:40 +01:00
# Configuring usb gadget functions
allow hal_usb_gadget_server configfs:lnk_file { read create unlink};
allow hal_usb_gadget_server configfs:dir rw_dir_perms;
Grant create_file_perms to hal_usb_gadget_server type=1400 audit(1516839845.731:13): avc: denied { unlink } for pid=800 comm="usb@1.1-service" name="UDC" dev="configfs" ino=27143 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:configfs:s0 tclass=file permissive=0 avc: denied { unlink } for pid=800 comm="usb@1.1-service" name="UDC" dev="configfs" ino=27143 scontext=u:r:hal_usb_impl:s0 tcontext=u:object_r:configfs:s0 tclass=file permissive=0 Bug: 63669128 Change-Id: If193c88658ec9c72299beb717990ddb8211da9a5
2018-01-25 00:43:56 +01:00
allow hal_usb_gadget_server configfs:file create_file_perms;
hal_usb_gadget sepolicy Bug: 63669128 Test: Checked for avc denail messages. Change-Id: I057b3cf9ccc945cb943b9cf60fc9cd6c023eddda Merged-In: I057b3cf9ccc945cb943b9cf60fc9cd6c023eddda
2018-01-08 18:29:40 +01:00
allow hal_usb_gadget_server functionfs:dir { read search };
allow hal_usb_gadget_server functionfs:file read;
Add selinux rules for android.hardware.usb.gadget.IUsbGadget AIDL migration Covers the rules needed for the default AIDL implementation. 10-26 10:22:42.408 448 448 I auditd : type=1400 audit(0.0:95): avc: denied { read } for comm="android.hardwar" name="interrupts" dev="proc" ino=4026531995 scontext=u:r:hal_usb_gadget_default:s0 tcontext=u:object_r:proc_interrupts:s0 tclass=file permissive=0 Bug: 218791946 Test: reboot and check if AIDL service is running. Signed-off-by: Ricky Niu <rickyniu@google.com> Change-Id: I8bdab3a682398f3c7e825a8894f45af2a9b6c199
2022-09-28 11:53:48 +02:00
allow hal_usb_gadget_server proc_interrupts:file r_file_perms;
Add selinux permissions for ro.usb.uvc.enabled This CL the selinux rules for the property ro.usb.uvc.enabled which will be used to toggle UVC Gadget functionality on the Android Device. Bug: 242344221 Bug: 242344229 Test: Manually tested that the property can only be read at runtime, not written to. Change-Id: I0fd6051666d9554037acc68fa81226503f514a45
2023-01-24 08:46:42 +01:00
# Read access to ro.usb.uvc.enabled
get_prop(hal_usb_gadget_server, usb_uvc_enabled_prop)
Reference in a new issue Copy permalink