touch: provide permission for TouchInspector app

avc:  denied  { write } for  name="driver_test" dev="proc"
ino=4026535975 scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:proc_touch:s0 tclass=file permissive=1
app=com.google.touch.touchinspector

avc:  denied  { open } for  path="/proc/fts/driver_test" dev="proc"
ino=4026535975 scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:proc_touch:s0 tclass=file permissive=1
app=com.google.touch.touchinspector

avc:  denied  { getattr } for  path="/proc/fts/driver_test"
dev="proc" ino=4026535975 scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:proc_touch:s0 tclass=file permissive=1
app=com.google.touch.touchinspector

avc:  denied  { read } for  name="driver_test" dev="proc"
ino=4026535975 scontext=u:r:platform_app:s0:c512,c768
tcontext=u:object_r:proc_touch:s0 tclass=file permissive=1
app=com.google.touch.touchinspector

Bug: 279675034
Test: trigger touch calibration by the app.

Change-Id: Ib1621aa0fd3f10c2e12d7ec8930908ca77c615bb
Signed-off-by: Yen-Chao Chen <davidycchen@google.com>
This commit is contained in:
Yen-Chao Chen 2023-05-02 14:35:08 +08:00
parent fb8529da4d
commit d5e44df4bb
4 changed files with 17 additions and 0 deletions

View File

@ -0,0 +1,3 @@
userdebug_or_eng(`
typeattribute proc_touch mlstrustedobject;
')

View File

@ -0,0 +1,9 @@
type google_touch_app, domain;
userdebug_or_eng(`
app_domain(google_touch_app)
allow google_touch_app app_api_service:service_manager find;
allow google_touch_app proc_touch:file rw_file_perms;
')

View File

@ -0,0 +1,2 @@
# Touch app
user=_app seinfo=platform name=com.google.touch.touchinspector domain=google_touch_app type=app_data_file levelFrom=user

View File

@ -0,0 +1,3 @@
BOARD_VENDOR_SEPOLICY_DIRS += device/google/gs-common/touch/touchinspector/sepolicy
PRODUCT_PACKAGES_DEBUG += TouchInspector