tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Switch Fingerprint HAL policy to _client/_server"

Browse source 
am: 313dfe7dcf

Change-Id: Id3134f3157f29b3e878cde82ed33cac35f162c87
This commit is contained in:
Alex Klyubin 2017-02-22 04:12:56 +00:00 committed by android-build-merger
commit bb252e98b8
4 changed files with 8 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
private/system_server.te
View file

@ -170,7 +170,6 @@ binder_call(system_server, appdomain)
binder_call(system_server, binderservicedomain)
binder_call(system_server, dumpstate)
binder_call(system_server, fingerprintd)
binder_call(system_server, hal_fingerprint)
binder_call(system_server, gatekeeperd)
binder_call(system_server, installd)
binder_call(system_server, incidentd)
@ -183,7 +182,7 @@ hwbinder_use(system_server)
hwallocator_use(system_server)
binder_call(system_server, hal_boot)
binder_call(system_server, hal_contexthub)
binder_call(system_server, hal_fingerprint)
hal_client_domain(system_server, hal_fingerprint)
binder_call(system_server, hal_gnss);
binder_call(system_server, hal_ir)
binder_call(system_server, hal_light)

2
public/attributes
View file

@ -139,6 +139,8 @@ attribute hal_drm_client;
attribute hal_drm_server;
attribute hal_dumpstate;
attribute hal_fingerprint;
attribute hal_fingerprint_client;
attribute hal_fingerprint_server;
attribute hal_gatekeeper;
attribute hal_gnss;
attribute hal_graphics_allocator;

15
public/hal_fingerprint.te
View file

@ -1,22 +1,15 @@
# HwBinder IPC from client to server, and callbacks
binder_call(hal_fingerprint_client, hal_fingerprint_server)
binder_call(hal_fingerprint_server, hal_fingerprint_client)
# allow HAL module to read dir contents
allow hal_fingerprint fingerprintd_data_file:file create_file_perms;
# allow HAL module to read/write/unlink contents of this dir
allow hal_fingerprint fingerprintd_data_file:dir rw_dir_perms;
# Need to add auth tokens to KeyStore
use_keystore(hal_fingerprint)
allow hal_fingerprint keystore:keystore_key add_auth;
# For permissions checking
binder_call(hal_fingerprint, system_server);
allow hal_fingerprint permission_service:service_manager find;
# For memory allocation
allow hal_fingerprint ion_device:chr_file r_file_perms;
# Allow fingerprint to find and call keystore binder interfaces
binder_use(hal_fingerprint);
r_dir_file(hal_fingerprint, cgroup)
r_dir_file(hal_fingerprint, sysfs)

2
vendor/hal_fingerprint_default.te vendored
View file

@ -1,5 +1,5 @@
type hal_fingerprint_default, domain;
hal_impl_domain(hal_fingerprint_default, hal_fingerprint)
hal_server_domain(hal_fingerprint_default, hal_fingerprint)
type hal_fingerprint_default_exec, exec_type, file_type;
init_daemon_domain(hal_fingerprint_default)