5131ff6544
This prebuilt is based on the AOSP policy, but slightly manipulated so that the set of types and attributes are identical with R policy. Following types are removed. boot_status_prop dalvik_config_prop gnss_device surfaceflinger_color_prop surfaceflinger_prop systemsound_config_prop vold_config_prop vold_status_prop Following type is renamed. wificond_service -> wifinl80211_service Bug: 153661471 Test: N/A Change-Id: I018d5e43f53c2bf721db1d13f5f4be42b9782b29
26 lines
952 B
Text
26 lines
952 B
Text
type system_suspend, domain, coredomain, system_suspend_server;
|
|
|
|
type system_suspend_exec, system_file_type, exec_type, file_type;
|
|
init_daemon_domain(system_suspend)
|
|
|
|
# To serve ISuspendControlService.aidl.
|
|
binder_use(system_suspend)
|
|
add_service(system_suspend, system_suspend_control_service)
|
|
|
|
# Access to /sys/power/{ wakeup_count, state } suspend interface.
|
|
allow system_suspend sysfs_power:file rw_file_perms;
|
|
|
|
# Access to wakeup and suspend stats.
|
|
r_dir_file(system_suspend, sysfs_suspend_stats)
|
|
r_dir_file(system_suspend, sysfs_wakeup)
|
|
# To resolve arbitrary sysfs paths from /sys/class/wakeup/* symlinks.
|
|
allow system_suspend sysfs_type:dir search;
|
|
|
|
neverallow {
|
|
domain
|
|
-atrace # tracing
|
|
-dumpstate # bug reports
|
|
-system_suspend # implements system_suspend_control_service
|
|
-system_server # configures system_suspend via ISuspendControlService
|
|
-traceur_app # tracing
|
|
} system_suspend_control_service:service_manager find;
|