tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Switch Sensors HAL policy to _client/_server

Browse source 
am: 41518bec25

Change-Id: I1dab4e9ed558ac04fdf78b03d0d4e753687a6ee2
This commit is contained in:
Alex Klyubin 2017-03-14 22:00:28 +00:00 committed by android-build-merger
commit 6a0ba6c580
4 changed files with 9 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
private/system_server.te
View file

@ -182,7 +182,7 @@ binder_call(system_server, hal_ir)
binder_call(system_server, hal_light)
binder_call(system_server, hal_memtrack)
binder_call(system_server, hal_power)
binder_call(system_server, hal_sensors)
hal_client_domain(system_server, hal_sensors)
binder_call(system_server, hal_thermal)
binder_call(system_server, hal_usb)
binder_call(system_server, hal_vibrator)
@ -453,9 +453,6 @@ allow system_server cache_private_backup_file:file create_file_perms;
allow system_server usb_device:chr_file rw_file_perms;
allow system_server usb_device:dir r_dir_perms;
# Allow system to talk to sensors
allow system_server sensors_device:chr_file rw_file_perms;
# Read from HW RNG (needed by EntropyMixer).
allow system_server hw_random_device:chr_file r_file_perms;

2
public/attributes
View file

@ -160,6 +160,8 @@ attribute hal_memtrack;
attribute hal_nfc;
attribute hal_power;
attribute hal_sensors;
attribute hal_sensors_client;
attribute hal_sensors_server;
attribute hal_telephony;
attribute hal_thermal;
attribute hal_usb;

7
public/hal_sensors.te
View file

@ -1,2 +1,5 @@
#Allow sensor hals to access ashmem memory allocated by apps
allow hal_sensors {appdomain - isolated_app}:fd use;
# HwBinder IPC from client to server
binder_call(hal_sensors_client, hal_sensors_server)
# Allow sensor hals to access ashmem memory allocated by apps
allow hal_sensors { appdomain -isolated_app }:fd use;

2
vendor/hal_sensors_default.te vendored
View file

@ -1,5 +1,5 @@
type hal_sensors_default, domain;
hal_impl_domain(hal_sensors_default, hal_sensors)
hal_server_domain(hal_sensors_default, hal_sensors)
type hal_sensors_default_exec, exec_type, file_type;
init_daemon_domain(hal_sensors_default)