tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allow applications to use NN API HAL services"

Browse source 
am: 1642d4059a

Change-Id: I2910c5b5d662d8701975af271ab8a973dd4ca52f
This commit is contained in:
Yang Ni 2018-01-17 16:44:49 +00:00 committed by android-build-merger
commit d47b8e2440
2 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
private/app_neverallows.te
View file

@ -172,6 +172,7 @@ neverallow all_untrusted_apps {
-hal_graphics_allocator_hwservice
-hal_omx_hwservice
-hal_cas_hwservice
-hal_neuralnetworks_hwservice
-untrusted_app_visible_hwservice
}:hwservice_manager find;
@ -194,7 +195,6 @@ neverallow all_untrusted_apps {
hal_keymaster_hwservice
hal_light_hwservice
hal_memtrack_hwservice
hal_neuralnetworks_hwservice
hal_nfc_hwservice
hal_oemlock_hwservice
hal_power_hwservice
@ -238,6 +238,7 @@ full_treble_only(`
-hal_configstore_server
-hal_graphics_allocator_server
-hal_cas_server
-hal_neuralnetworks_server
-binder_in_vendor_violators # TODO(b/35870313): Remove once all violations are gone
-untrusted_app_visible_halserver
}:binder { call transfer };

5
private/technical_debt.cil
View file

@ -31,3 +31,8 @@
; Unfortunately, we can't currently express this in module policy language:
; typeattribute hal_camera hal_allocator_client;
(typeattributeset hal_allocator_client (hal_camera))
; Apps, except isolated apps, are clients of Neuralnetworks HAL
; Unfortunately, we can't currently express this in module policy language:
; typeattribute { appdomain -isolated_app } hal_neuralnetworks_client;
(typeattributeset hal_neuralnetworks_client ((and (appdomain) ((not (isolated_app))))))