platform_system_sepolicy/private/vehicle_binding_util.te
Yu Shan d5af7b7cea Allow vehicle_binding_util to access AIDL VHAL.
AIDL service requires binder_use not hwbinder_use.

Test: None
Bug: None
Change-Id: Ic2245c4b1961cc3a5bbd61a1cb6134d92b8752c1
2022-04-29 16:39:03 -07:00

22 lines
771 B
Text

# vehicle binding util startup application
type vehicle_binding_util, domain, coredomain;
# allow init to start vehicle_binding_util
type vehicle_binding_util_exec, exec_type, file_type, system_file_type;
init_daemon_domain(vehicle_binding_util)
# allow writing to kmsg during boot
allow vehicle_binding_util kmsg_device:chr_file { getattr w_file_perms };
# allow reading the binding property from HIDL VHAL.
hwbinder_use(vehicle_binding_util)
# allow reading the binding property from AIDL VHAL.
binder_use(vehicle_binding_util)
hal_client_domain(vehicle_binding_util, hal_vehicle)
# allow executing vdc
domain_auto_trans(vehicle_binding_util, vdc_exec, vdc)
# devpts is needed to redirect output from vdc
allow vehicle_binding_util devpts:chr_file rw_file_perms;