Update sepolicies for stats hal
Bug: 116732452 Test: No sepolicy violations observed with this change (cherry picked from commit I1958182dd8ecc496625da2a2a834f71f5d43e7bb) Change-Id: Ib386767d8acfacf9fedafd9a79dd555ce233f41c
This commit is contained in:
parent
21eed51185
commit
578a189178
6 changed files with 8 additions and 0 deletions
|
@ -57,6 +57,7 @@
|
||||||
fastbootd
|
fastbootd
|
||||||
fingerprint_vendor_data_file
|
fingerprint_vendor_data_file
|
||||||
fs_bpf
|
fs_bpf
|
||||||
|
fwk_stats_hwservice
|
||||||
hal_atrace_hwservice
|
hal_atrace_hwservice
|
||||||
hal_audiocontrol_hwservice
|
hal_audiocontrol_hwservice
|
||||||
hal_authsecret_hwservice
|
hal_authsecret_hwservice
|
||||||
|
|
|
@ -53,6 +53,7 @@
|
||||||
fastbootd
|
fastbootd
|
||||||
fingerprint_vendor_data_file
|
fingerprint_vendor_data_file
|
||||||
fs_bpf
|
fs_bpf
|
||||||
|
fwk_stats_hwservice
|
||||||
hal_atrace_hwservice
|
hal_atrace_hwservice
|
||||||
hal_audiocontrol_hwservice
|
hal_audiocontrol_hwservice
|
||||||
hal_authsecret_hwservice
|
hal_authsecret_hwservice
|
||||||
|
|
|
@ -10,6 +10,7 @@
|
||||||
;; TODO(b/116344577): remove after the issue is resolved
|
;; TODO(b/116344577): remove after the issue is resolved
|
||||||
buffer_hub_service
|
buffer_hub_service
|
||||||
fastbootd
|
fastbootd
|
||||||
|
fwk_stats_hwservice
|
||||||
color_display_service
|
color_display_service
|
||||||
hal_atrace_hwservice
|
hal_atrace_hwservice
|
||||||
hal_health_storage_hwservice
|
hal_health_storage_hwservice
|
||||||
|
|
|
@ -1,6 +1,7 @@
|
||||||
android.frameworks.displayservice::IDisplayService u:object_r:fwk_display_hwservice:s0
|
android.frameworks.displayservice::IDisplayService u:object_r:fwk_display_hwservice:s0
|
||||||
android.frameworks.schedulerservice::ISchedulingPolicyService u:object_r:fwk_scheduler_hwservice:s0
|
android.frameworks.schedulerservice::ISchedulingPolicyService u:object_r:fwk_scheduler_hwservice:s0
|
||||||
android.frameworks.sensorservice::ISensorManager u:object_r:fwk_sensor_hwservice:s0
|
android.frameworks.sensorservice::ISensorManager u:object_r:fwk_sensor_hwservice:s0
|
||||||
|
android.frameworks.stats::IStats u:object_r:fwk_stats_hwservice:s0
|
||||||
android.hardware.atrace::IAtraceDevice u:object_r:hal_atrace_hwservice:s0
|
android.hardware.atrace::IAtraceDevice u:object_r:hal_atrace_hwservice:s0
|
||||||
android.hardware.audio.effect::IEffectsFactory u:object_r:hal_audio_hwservice:s0
|
android.hardware.audio.effect::IEffectsFactory u:object_r:hal_audio_hwservice:s0
|
||||||
android.hardware.audio::IDevicesFactory u:object_r:hal_audio_hwservice:s0
|
android.hardware.audio::IDevicesFactory u:object_r:hal_audio_hwservice:s0
|
||||||
|
|
|
@ -2,6 +2,7 @@ type default_android_hwservice, hwservice_manager_type;
|
||||||
type fwk_display_hwservice, hwservice_manager_type, coredomain_hwservice;
|
type fwk_display_hwservice, hwservice_manager_type, coredomain_hwservice;
|
||||||
type fwk_scheduler_hwservice, hwservice_manager_type, coredomain_hwservice;
|
type fwk_scheduler_hwservice, hwservice_manager_type, coredomain_hwservice;
|
||||||
type fwk_sensor_hwservice, hwservice_manager_type, coredomain_hwservice;
|
type fwk_sensor_hwservice, hwservice_manager_type, coredomain_hwservice;
|
||||||
|
type fwk_stats_hwservice, hwservice_manager_type, coredomain_hwservice;
|
||||||
type hal_atrace_hwservice, hwservice_manager_type;
|
type hal_atrace_hwservice, hwservice_manager_type;
|
||||||
type hal_audiocontrol_hwservice, hwservice_manager_type;
|
type hal_audiocontrol_hwservice, hwservice_manager_type;
|
||||||
type hal_audio_hwservice, hwservice_manager_type;
|
type hal_audio_hwservice, hwservice_manager_type;
|
||||||
|
|
|
@ -46,6 +46,9 @@ allow statsd {
|
||||||
system_api_service
|
system_api_service
|
||||||
}:service_manager find;
|
}:service_manager find;
|
||||||
|
|
||||||
|
# Allow statsd to add as HIDL service.
|
||||||
|
add_hwservice(statsd, fwk_stats_hwservice)
|
||||||
|
|
||||||
# Grant statsd to access health hal to access battery metrics.
|
# Grant statsd to access health hal to access battery metrics.
|
||||||
allow statsd hal_health_hwservice:hwservice_manager find;
|
allow statsd hal_health_hwservice:hwservice_manager find;
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue