platform_system_sepolicy/private/vehicle_binding_util.te
Keith Mok f906da515c Revert "Revert "Allow vehicle_binding_util to access AIDL VHAL. am: d5af7b7cea am: 565699bc61 am: e4ddf119a1 am: 54e7d19e1d am: 3686a43f8f""
This reverts commit 2140c74523.

Reason for revert: Added a fix for that (to update the 33.0 sepolicy api)

Change-Id: I2e738618026df6475de7baf1551a031b86c28590
2022-05-11 18:14:06 +00:00

22 lines
771 B
Text

# vehicle binding util startup application
type vehicle_binding_util, domain, coredomain;
# allow init to start vehicle_binding_util
type vehicle_binding_util_exec, exec_type, file_type, system_file_type;
init_daemon_domain(vehicle_binding_util)
# allow writing to kmsg during boot
allow vehicle_binding_util kmsg_device:chr_file { getattr w_file_perms };
# allow reading the binding property from HIDL VHAL.
hwbinder_use(vehicle_binding_util)
# allow reading the binding property from AIDL VHAL.
binder_use(vehicle_binding_util)
hal_client_domain(vehicle_binding_util, hal_vehicle)
# allow executing vdc
domain_auto_trans(vehicle_binding_util, vdc_exec, vdc)
# devpts is needed to redirect output from vdc
allow vehicle_binding_util devpts:chr_file rw_file_perms;