tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Update SELinux Policy for bufferhubd

Browse source 
Create a new service type buffer_hub_binder_service for
BufferHubBinderService and allow bufferhubd to publish the service.

Add the service to 26.0, 27.0 and 28.0 compat ignore files since the
service is not available in past versions.

Fixes: 116022258
Test: build passed

Change-Id: I5a21f00329ed474433d96c8d1ce32377f20cada3
This commit is contained in:
Fan Xu 2018-09-17 17:06:19 -07:00
parent 06ddf4b44e
commit 26fa914cb2
8 changed files with 16 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
private/bufferhubd.te
View file

@ -1,3 +1,7 @@
typeattribute bufferhubd coredomain;
init_daemon_domain(bufferhubd)
# Permission for create binder service "bufferhubd"
binder_use(bufferhubd);
add_service(bufferhubd, buffer_hub_service);

2
private/compat/26.0/26.0.ignore.cil
View file

@ -18,6 +18,8 @@
bpfloader
bpfloader_exec
broadcastradio_service
;; TODO(b/116344577): remove after the issue is resolved
buffer_hub_service
cgroup_bpf
color_display_service
crossprofileapps_service

2
private/compat/27.0/27.0.ignore.cil
View file

@ -16,6 +16,8 @@
bluetooth_a2dp_offload_prop
bpfloader
bpfloader_exec
;; TODO(b/116344577): remove after the issue is resolved
buffer_hub_service
cgroup_bpf
color_display_service
crossprofileapps_service

2
private/compat/28.0/28.0.ignore.cil
View file

@ -7,6 +7,8 @@
adb_service
app_binding_service
biometric_service
;; TODO(b/116344577): remove after the issue is resolved
buffer_hub_service
fastbootd
color_display_service
hal_health_storage_hwservice

1
private/service.te
View file

@ -1,2 +1,3 @@
type buffer_hub_service, service_manager_type;
type stats_service, service_manager_type;
type statscompanion_service, system_server_service, service_manager_type;

1
private/service_contexts
View file

@ -22,6 +22,7 @@ biometric u:object_r:biometric_service:s0
bluetooth_manager u:object_r:bluetooth_manager_service:s0
bluetooth u:object_r:bluetooth_service:s0
broadcastradio u:object_r:broadcastradio_service:s0
bufferhubd u:object_r:buffer_hub_service:s0
carrier_config u:object_r:radio_service:s0
clipboard u:object_r:clipboard_service:s0
com.android.net.IProxyService u:object_r:IProxyService_service:s0

3
private/shell.te
View file

@ -51,3 +51,6 @@ binder_call(shell, statsd);
# Allow shell to read and unlink traces stored in /data/misc/perfetto-traces.
allow shell perfetto_traces_data_file:dir rw_dir_perms;
allow shell perfetto_traces_data_file:file r_file_perms;
# Allow shell-based "dumpsys" to call into bufferhubd.
binder_call(shell, bufferhubd);

1
public/bufferhubd.te
View file

@ -4,6 +4,7 @@ type bufferhubd_exec, exec_type, file_type;
hal_client_domain(bufferhubd, hal_graphics_allocator)
# TODO(b/112338294): remove these after migrate to Binder
pdx_server(bufferhubd, bufferhub_client)
pdx_client(bufferhubd, performance_client)