tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Permissions for InputClassifier HAL

Browse source 
Add the required permissions for the InputClassifier HAL.

Bug: 62940136
Test: no selinux denials in logcat when HAL is used inside input flinger.
Change-Id: Ibc9b115a83719421d56ecb4bca2fd196ec71fd76
This commit is contained in:
Siarhei Vishniakou 2018-01-17 12:27:06 -08:00
parent fb15c9f12f
commit 41a871ba84
10 changed files with 17 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
private/app_neverallows.te
View file

@ -263,6 +263,7 @@ neverallow all_untrusted_apps {
hal_gnss_hwservice hal_gnss_hwservice
hal_graphics_composer_hwservice hal_graphics_composer_hwservice
hal_health_hwservice hal_health_hwservice
hal_input_classifier_hwservice
hal_ir_hwservice hal_ir_hwservice
hal_keymaster_hwservice hal_keymaster_hwservice
hal_light_hwservice hal_light_hwservice

1
private/compat/28.0/28.0.ignore.cil
View file

@ -37,6 +37,7 @@
hal_atrace_hwservice hal_atrace_hwservice
hal_face_hwservice hal_face_hwservice
hal_health_storage_hwservice hal_health_storage_hwservice
hal_input_classifier_hwservice
hal_power_stats_hwservice hal_power_stats_hwservice
hal_system_suspend_default hal_system_suspend_default
hal_system_suspend_default_exec hal_system_suspend_default_exec

1
private/hwservice_contexts
View file

@ -32,6 +32,7 @@ android.hardware.graphics.composer::IComposer u:object_r:hal_g
android.hardware.graphics.mapper::IMapper u:object_r:hal_graphics_mapper_hwservice:s0 android.hardware.graphics.mapper::IMapper u:object_r:hal_graphics_mapper_hwservice:s0
android.hardware.health::IHealth u:object_r:hal_health_hwservice:s0 android.hardware.health::IHealth u:object_r:hal_health_hwservice:s0
android.hardware.health.storage::IStorage u:object_r:hal_health_storage_hwservice:s0 android.hardware.health.storage::IStorage u:object_r:hal_health_storage_hwservice:s0
android.hardware.input.classifier::IInputClassifier u:object_r:hal_input_classifier_hwservice:s0
android.hardware.ir::IConsumerIr u:object_r:hal_ir_hwservice:s0 android.hardware.ir::IConsumerIr u:object_r:hal_ir_hwservice:s0
android.hardware.keymaster::IKeymasterDevice u:object_r:hal_keymaster_hwservice:s0 android.hardware.keymaster::IKeymasterDevice u:object_r:hal_keymaster_hwservice:s0
android.hardware.light::ILight u:object_r:hal_light_hwservice:s0 android.hardware.light::ILight u:object_r:hal_light_hwservice:s0

1
private/system_server.te
View file

@ -210,6 +210,7 @@ hal_client_domain(system_server, hal_fingerprint)
hal_client_domain(system_server, hal_gnss) hal_client_domain(system_server, hal_gnss)
hal_client_domain(system_server, hal_graphics_allocator) hal_client_domain(system_server, hal_graphics_allocator)
hal_client_domain(system_server, hal_health) hal_client_domain(system_server, hal_health)
hal_client_domain(system_server, hal_input_classifier)
hal_client_domain(system_server, hal_ir) hal_client_domain(system_server, hal_ir)
hal_client_domain(system_server, hal_light) hal_client_domain(system_server, hal_light)
hal_client_domain(system_server, hal_memtrack) hal_client_domain(system_server, hal_memtrack)

1
public/attributes
View file

@ -266,6 +266,7 @@ hal_attribute(graphics_allocator);
hal_attribute(graphics_composer); hal_attribute(graphics_composer);
hal_attribute(health); hal_attribute(health);
hal_attribute(health_storage); hal_attribute(health_storage);
hal_attribute(input_classifier);
hal_attribute(ir); hal_attribute(ir);
hal_attribute(keymaster); hal_attribute(keymaster);
hal_attribute(light); hal_attribute(light);

4
public/hal_input_classifier.te Normal file
View file

@ -0,0 +1,4 @@
# HwBinder IPC from client to server
binder_call(hal_input_classifier_client, hal_input_classifier_server)
hal_attribute_hwservice(hal_input_classifier, hal_input_classifier_hwservice)

1
public/hwservice.te
View file

@ -29,6 +29,7 @@ type hal_graphics_composer_hwservice, hwservice_manager_type;
type hal_graphics_mapper_hwservice, hwservice_manager_type, same_process_hwservice; type hal_graphics_mapper_hwservice, hwservice_manager_type, same_process_hwservice;
type hal_health_hwservice, hwservice_manager_type; type hal_health_hwservice, hwservice_manager_type;
type hal_health_storage_hwservice, hwservice_manager_type; type hal_health_storage_hwservice, hwservice_manager_type;
type hal_input_classifier_hwservice, hwservice_manager_type;
type hal_ir_hwservice, hwservice_manager_type; type hal_ir_hwservice, hwservice_manager_type;
type hal_keymaster_hwservice, hwservice_manager_type; type hal_keymaster_hwservice, hwservice_manager_type;
type hal_light_hwservice, hwservice_manager_type; type hal_light_hwservice, hwservice_manager_type;

1
public/su.te
View file

@ -76,6 +76,7 @@ userdebug_or_eng(`
typeattribute su hal_graphics_allocator_client; typeattribute su hal_graphics_allocator_client;
typeattribute su hal_graphics_composer_client; typeattribute su hal_graphics_composer_client;
typeattribute su hal_health_client; typeattribute su hal_health_client;
typeattribute su hal_input_classifier_client;
typeattribute su hal_ir_client; typeattribute su hal_ir_client;
typeattribute su hal_keymaster_client; typeattribute su hal_keymaster_client;
typeattribute su hal_light_client; typeattribute su hal_light_client;

1
vendor/file_contexts vendored
View file

@ -28,6 +28,7 @@
/(vendor|system/vendor)/bin/hw/android\.hardware\.health@1\.0-service u:object_r:hal_health_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.health@1\.0-service u:object_r:hal_health_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.health@2\.0-service u:object_r:hal_health_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.health@2\.0-service u:object_r:hal_health_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.health\.storage@1\.0-service u:object_r:hal_health_storage_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.health\.storage@1\.0-service u:object_r:hal_health_storage_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.input\.classifier@1\.0-service u:object_r:hal_input_classifier_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.ir@1\.0-service u:object_r:hal_ir_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.ir@1\.0-service u:object_r:hal_ir_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@3\.0-service u:object_r:hal_keymaster_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@3\.0-service u:object_r:hal_keymaster_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@4\.0-service u:object_r:hal_keymaster_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.keymaster@4\.0-service u:object_r:hal_keymaster_default_exec:s0

5
vendor/hal_input_classifier_default.te vendored Normal file
View file

@ -0,0 +1,5 @@
type hal_input_classifier_default, domain;
hal_server_domain(hal_input_classifier_default, hal_input_classifier)
type hal_input_classifier_default_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_input_classifier_default)