platform_system_sepolicy/public/hal_bluetooth.te
Andre Eisenbach be27f92a3e Add selinux policy for Bluetooth HAL
Bug: 31972505
Test: VTS test passes, Bluetooth starts/stops
Change-Id: Ic068c9fca7c50e63c5b6e3d86a2ee6cc53207e08
2017-01-10 15:05:14 -08:00

25 lines
728 B
Text

# hwbinder access
hwbinder_use(hal_bluetooth)
r_dir_file(hal_bluetooth, system_file)
# call into the Bluetooth process (callbacks)
binder_call(hal_bluetooth, bluetooth)
wakelock_use(hal_bluetooth);
# bluetooth factory file accesses.
r_dir_file(hal_bluetooth, bluetooth_efs_file)
allow hal_bluetooth { uhid_device hci_attach_dev }:chr_file rw_file_perms;
# Access to config files to look for a Bluetooth address
r_dir_file(hal_bluetooth, bluetooth_data_file)
# sysfs access.
r_dir_file(hal_bluetooth, sysfs_type)
allow hal_bluetooth sysfs_bluetooth_writable:file rw_file_perms;
allow hal_bluetooth self:capability2 wake_alarm;
# Allow write access to bluetooth-specific properties
set_prop(hal_bluetooth, bluetooth_prop)