75806ef3c5
Ideally, public should only contain APIs (types / attributes) for vendor. The other statements like allow/neverallow/typeattributes are regarded as implementation detail for platform and should be in private. Bug: 232023812 Test: m selinux_policy Test: diff <(git diff --staged | grep "^-" | cut -b2- | sort) \ <(git diff --staged | grep "^+" | cut -b2- | sort) Test: remove comments on plat_sepolicy.cil, replace base_typeattr_* to base_typeattr and then compare old and new plat_sepolicy.cil Change-Id: I5e7d2da4465ab0216de6bacdf03077d37f6ffe12
21 lines
757 B
Text
21 lines
757 B
Text
# HwBinder IPC from client to server, and callbacks
|
|
binder_call(hal_usb_client, hal_usb_server)
|
|
binder_call(hal_usb_server, hal_usb_client)
|
|
|
|
hal_attribute_service(hal_usb, hal_usb_service)
|
|
binder_call(hal_usb_server, servicemanager)
|
|
|
|
hal_attribute_hwservice(hal_usb, hal_usb_hwservice)
|
|
|
|
allow hal_usb self:netlink_kobject_uevent_socket create;
|
|
allow hal_usb self:netlink_kobject_uevent_socket setopt;
|
|
allow hal_usb self:netlink_kobject_uevent_socket getopt;
|
|
allow hal_usb self:netlink_kobject_uevent_socket bind;
|
|
allow hal_usb self:netlink_kobject_uevent_socket read;
|
|
allow hal_usb sysfs:dir open;
|
|
allow hal_usb sysfs:dir read;
|
|
allow hal_usb sysfs:file read;
|
|
allow hal_usb sysfs:file open;
|
|
allow hal_usb sysfs:file write;
|
|
allow hal_usb sysfs:file getattr;
|
|
|