drgreen/android_device_google_gs-common
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[SELinux] Initial access fingerprint sepolicy for gyotaku_app

Browse Source 
Initial a specific build folder for fingerprint, we need to include the mk file on specific build.

Bug: 342335081

Test: Local build and sepolicy tests passed.
Change-Id: I8b8522ed949abc586ebab2efe4061f5e4b6cdde0
This commit is contained in:
Klines Jiang 2024-05-29 02:23:19 +00:00
parent e92cc2f8b1
commit 65a5fe99c1
3 changed files with 26 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
gyotaku_app/fingerprint/gyotaku_app.te Normal file
View File

@ -0,0 +1,19 @@
# Specific build for fingerprint
type gyotaku_app, domain;
app_domain(gyotaku_app)
net_domain(gyotaku_app)
# For Gyotaku app common use
allow gyotaku_app app_api_service:service_manager find;
allow gyotaku_app privapp_data_file:lnk_file read;
allow gyotaku_app system_app_data_file:dir create_dir_perms;
allow gyotaku_app system_app_data_file:file create_file_perms;
# For getproperty isDebuggable use
get_prop(gyotaku_app, userdebug_or_eng_prop)
# For access /data/vendor/misc fingerprint use.
allow gyotaku_app vendor_misc_data_file:dir search;
allow gyotaku_app vendor_fingerprint_data_file:dir r_dir_perms;
allow gyotaku_app vendor_fingerprint_data_file:file r_file_perms;

2
gyotaku_app/fingerprint/seapp_contexts Normal file
View File

@ -0,0 +1,2 @@
# Gyotaku app
user=system seinfo=platform name=com.google.android.apps.internal.gyotaku domain=gyotaku_app type=system_app_data_file levelFrom=all

5
gyotaku_app/gyotaku_fingerprint.mk Normal file
View File

@ -0,0 +1,5 @@
# Specific build for fingerprint
PRODUCT_PACKAGES_DEBUG += \
Gyotaku
BOARD_SEPOLICY_DIRS += device/google/gs-common/gyotaku_app/fingerprint