Update sepolicies for stats hal

Bug: 116732452
Test: No sepolicy violations observed with this change
(cherry picked from commit I1958182dd8ecc496625da2a2a834f71f5d43e7bb)

Change-Id: Ib386767d8acfacf9fedafd9a79dd555ce233f41c
This commit is contained in:
Howard Ro 2018-09-28 13:34:37 -07:00
parent 21eed51185
commit 578a189178
6 changed files with 8 additions and 0 deletions

View file

@ -57,6 +57,7 @@
fastbootd
fingerprint_vendor_data_file
fs_bpf
fwk_stats_hwservice
hal_atrace_hwservice
hal_audiocontrol_hwservice
hal_authsecret_hwservice

View file

@ -53,6 +53,7 @@
fastbootd
fingerprint_vendor_data_file
fs_bpf
fwk_stats_hwservice
hal_atrace_hwservice
hal_audiocontrol_hwservice
hal_authsecret_hwservice

View file

@ -10,6 +10,7 @@
;; TODO(b/116344577): remove after the issue is resolved
buffer_hub_service
fastbootd
fwk_stats_hwservice
color_display_service
hal_atrace_hwservice
hal_health_storage_hwservice

View file

@ -1,6 +1,7 @@
android.frameworks.displayservice::IDisplayService u:object_r:fwk_display_hwservice:s0
android.frameworks.schedulerservice::ISchedulingPolicyService u:object_r:fwk_scheduler_hwservice:s0
android.frameworks.sensorservice::ISensorManager u:object_r:fwk_sensor_hwservice:s0
android.frameworks.stats::IStats u:object_r:fwk_stats_hwservice:s0
android.hardware.atrace::IAtraceDevice u:object_r:hal_atrace_hwservice:s0
android.hardware.audio.effect::IEffectsFactory u:object_r:hal_audio_hwservice:s0
android.hardware.audio::IDevicesFactory u:object_r:hal_audio_hwservice:s0

View file

@ -2,6 +2,7 @@ type default_android_hwservice, hwservice_manager_type;
type fwk_display_hwservice, hwservice_manager_type, coredomain_hwservice;
type fwk_scheduler_hwservice, hwservice_manager_type, coredomain_hwservice;
type fwk_sensor_hwservice, hwservice_manager_type, coredomain_hwservice;
type fwk_stats_hwservice, hwservice_manager_type, coredomain_hwservice;
type hal_atrace_hwservice, hwservice_manager_type;
type hal_audiocontrol_hwservice, hwservice_manager_type;
type hal_audio_hwservice, hwservice_manager_type;

View file

@ -46,6 +46,9 @@ allow statsd {
system_api_service
}:service_manager find;
# Allow statsd to add as HIDL service.
add_hwservice(statsd, fwk_stats_hwservice)
# Grant statsd to access health hal to access battery metrics.
allow statsd hal_health_hwservice:hwservice_manager find;