drgreen/android_device_google_gs-common
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

gs-common: move sepolicy related to bootctrl hal aidl to gs-common

Browse Source 
Bug: 265063384
Change-Id: I8f090f4601e0719ae3abe3e9d0981710fdc8b6af
Signed-off-by: Jason Chiu <jasoncschiu@google.com>
This commit is contained in:
Jason Chiu 2023-11-27 16:58:15 +08:00
parent e2592f8850
commit 9895837239
5 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
bootctrl/bootctrl_aidl.mk
View File

@ -1,3 +1,5 @@
PRODUCT_PACKAGES += \
android.hardware.boot-service.default-pixel \
android.hardware.boot-service.default_recovery-pixel
BOARD_VENDOR_SEPOLICY_DIRS += device/google/gs-common/bootctrl/sepolicy/aidl

5
bootctrl/sepolicy/aidl/device.te Normal file
View File

@ -0,0 +1,5 @@
# devinfo block device
type devinfo_block_device, dev_type;
# OTA
type sda_block_device, dev_type;

2
bootctrl/sepolicy/aidl/file.te Normal file
View File

@ -0,0 +1,2 @@
# sysfs
type sysfs_ota, sysfs_type, fs_type;

1
bootctrl/sepolicy/aidl/file_contexts Normal file
View File

@ -0,0 +1 @@
/vendor/bin/hw/android\.hardware\.boot-service\.default-pixel u:object_r:hal_bootctl_default_exec:s0

8
bootctrl/sepolicy/aidl/hal_bootctl_default.te Normal file
View File

@ -0,0 +1,8 @@
allow hal_bootctl_default devinfo_block_device:blk_file rw_file_perms;
allow hal_bootctl_default sda_block_device:blk_file rw_file_perms;
allow hal_bootctl_default sysfs_ota:file rw_file_perms;
allow hal_bootctl_default tee_device:chr_file rw_file_perms;
recovery_only(`
allow hal_bootctl_default rootfs:dir r_dir_perms;
')