eacb1095a8
418f41ad13
Bug: 216727303
Test: m -j selinux_policy on failed targets reported
in b/218802298
Change-Id: Iec8fd2a1e9073bf3dc679e308407572a8fcf44d9
44 lines
1.7 KiB
Text
44 lines
1.7 KiB
Text
# Display proxy service for Automotive
|
|
type automotive_display_service, domain, coredomain;
|
|
type automotive_display_service_exec, system_file_type, exec_type, file_type;
|
|
|
|
typeattribute automotive_display_service automotive_display_service_server;
|
|
|
|
# Allow to add a display service to the hwservicemanager
|
|
add_hwservice(automotive_display_service, fwk_automotive_display_hwservice);
|
|
|
|
# Allow init to launch automotive display service
|
|
init_daemon_domain(automotive_display_service)
|
|
|
|
# Allow to use Binder IPC for SurfaceFlinger.
|
|
binder_use(automotive_display_service)
|
|
|
|
# Allow to use HwBinder IPC for HAL implementations.
|
|
hwbinder_use(automotive_display_service)
|
|
hal_client_domain(automotive_display_service, hal_graphics_composer)
|
|
hal_client_domain(automotive_display_service, hal_graphics_allocator)
|
|
|
|
# Allow to read the target property.
|
|
get_prop(automotive_display_service, hwservicemanager_prop)
|
|
|
|
# Allow to find SurfaceFlinger.
|
|
allow automotive_display_service surfaceflinger_service:service_manager find;
|
|
|
|
# Allow client domain to do binder IPC to serverdomain.
|
|
binder_call(automotive_display_service, surfaceflinger)
|
|
|
|
# Allow to use a graphics mapper
|
|
allow automotive_display_service hal_graphics_mapper_hwservice:hwservice_manager find;
|
|
|
|
# Allow to use hidl token service
|
|
allow automotive_display_service hidl_token_hwservice:hwservice_manager find;
|
|
|
|
# Allow to access EGL files
|
|
allow automotive_display_service gpu_device:chr_file rw_file_perms;
|
|
allow automotive_display_service gpu_device:dir search;
|
|
|
|
# Allow to add a service to the servicemanager
|
|
add_service(automotive_display_service, fwk_automotive_display_service);
|
|
|
|
# Allow to communicate with EVS services
|
|
binder_call(automotive_display_service, hal_evs)
|