tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add missing permissions for default bluetooth hal

Browse source 
Test: launch_cvd
Bug: 205758693
Change-Id: Ie55352bbe48c5eef281a293bedc5aa057f5dcdad
Merged-In: Ie55352bbe48c5eef281a293bedc5aa057f5dcdad
This commit is contained in:
Henri Chataing 2023-01-04 16:55:23 +00:00 committed by Myles Watson
parent d09a14baee
commit 9ff3423527
4 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
private/compat/33.0/33.0.ignore.cil
View file

@ -8,6 +8,7 @@
adaptive_haptics_prop adaptive_haptics_prop
apex_ready_prop apex_ready_prop
artd artd
bt_device
credential_service credential_service
device_config_camera_native_prop device_config_camera_native_prop
device_config_memory_safety_native_prop device_config_memory_safety_native_prop

1
public/device.te
View file

@ -7,6 +7,7 @@ type binder_device, dev_type, mlstrustedobject;
type hwbinder_device, dev_type, mlstrustedobject; type hwbinder_device, dev_type, mlstrustedobject;
type vndbinder_device, dev_type; type vndbinder_device, dev_type;
type block_device, dev_type; type block_device, dev_type;
type bt_device, dev_type;
type camera_device, dev_type; type camera_device, dev_type;
type dm_device, dev_type; type dm_device, dev_type;
type dm_user_device, dev_type; type dm_user_device, dev_type;

1
vendor/file_contexts vendored
View file

@ -17,6 +17,7 @@
/(vendor|system/vendor)/bin/hw/android\.hardware\.automotive\.remoteaccess@V1-(.*)-service u:object_r:hal_remoteaccess_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.automotive\.remoteaccess@V1-(.*)-service u:object_r:hal_remoteaccess_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.bluetooth@1\.[0-9]+-service u:object_r:hal_bluetooth_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.bluetooth@1\.[0-9]+-service u:object_r:hal_bluetooth_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.bluetooth@1\.[0-9]+-service\.btlinux u:object_r:hal_bluetooth_btlinux_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.bluetooth@1\.[0-9]+-service\.btlinux u:object_r:hal_bluetooth_btlinux_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.bluetooth-service.default u:object_r:hal_bluetooth_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.biometrics\.face@1\.[0-9]+-service\.example u:object_r:hal_face_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.biometrics\.face@1\.[0-9]+-service\.example u:object_r:hal_face_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.biometrics\.face-service\.example u:object_r:hal_face_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.biometrics\.face-service\.example u:object_r:hal_face_default_exec:s0
/(vendor|system/vendor)/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.1-service u:object_r:hal_fingerprint_default_exec:s0 /(vendor|system/vendor)/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.1-service u:object_r:hal_fingerprint_default_exec:s0

3
vendor/hal_bluetooth_default.te vendored
View file

@ -1,5 +1,8 @@
type hal_bluetooth_default, domain; type hal_bluetooth_default, domain;
hal_server_domain(hal_bluetooth_default, hal_bluetooth) hal_server_domain(hal_bluetooth_default, hal_bluetooth)
allow hal_bluetooth_default bt_device:chr_file { open read write };
allow hal_bluetooth_default self:bluetooth_socket { create bind read write };
type hal_bluetooth_default_exec, exec_type, vendor_file_type, file_type; type hal_bluetooth_default_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_bluetooth_default) init_daemon_domain(hal_bluetooth_default)