drgreen/android_device_google_gs-common
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update the common sepolicy for file access

Browse Source 
Bug: 248615564
Test: load sepolicy onto pixel device and verify the output using
      audit2allow
Change-Id: I295cefa3637298fba3d266f5f95f83cb7329bd02
This commit is contained in:
Lei Ju 2023-12-20 16:36:18 -08:00
parent 79938de33f
commit 403baea11f
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
chre/sepolicy/hal_contexthub_default.te
View File

@ -9,7 +9,7 @@ allow hal_contexthub_default sysfs_aoc:dir search;
allow hal_contexthub_default sysfs_aoc_boottime:file r_file_perms;
# Allow context hub HAL to create thread to watch AOC's device
allow hal_contexthub_default aoc_device:dir r_dir_perms;
allow hal_contexthub_default device:dir r_dir_perms;
# Allow context hub HAL to use the USF low latency transport
usf_low_latency_transport(hal_contexthub_default)
@ -22,6 +22,10 @@ allow hal_contexthub_default hal_wifi_ext_service:service_manager find;
binder_call(hal_contexthub_default, stats_service_server)
allow hal_contexthub_default fwk_stats_service:service_manager find;
# Allow context hub HAL to write data to /data/vendor/chre/ directory
allow hal_contexthub_default chre_data_file:dir create_dir_perms;
allow hal_contexthub_default chre_data_file:file create_file_perms;
# Allow context hub HAL to use WakeLock
wakelock_use(hal_contexthub_default)