device_xiaomi_sm6150-common/sepolicy/vendor/hal_fingerprint_default.te
basamaryan 12c3135ffb
sm6150-common: sepolicy: Allow fingerprint HAL to use vndbinder
Change-Id: Ic6c70a39392e349e0770411f42af15eebc5dfea4
2024-06-22 17:27:09 +05:30

32 lines
1.6 KiB
Plaintext

type hal_fingerprint_hwservice_xiaomi, hwservice_manager_type;
type hal_swfingerprint_hwservice, hwservice_manager_type;
type fingerprint_device, dev_type;
type fingerprint_data_file, data_file_type, file_type;
type vendor_sysfs_fod, sysfs_type, fs_type;
vendor_internal_prop(vendor_fp_prop)
vndbinder_use(hal_fingerprint_default)
allow hal_fingerprint_default fingerprint_device:chr_file rw_file_perms;
allow hal_fingerprint_default fingerprint_data_file:dir create_dir_perms;
allow hal_fingerprint_default fingerprint_data_file:file create_file_perms;
allow hal_fingerprint_default input_device:chr_file rw_file_perms;
allow hal_fingerprint_default self:netlink_kobject_uevent_socket { bind create read setopt };
allow hal_fingerprint_default self:netlink_socket create_socket_perms_no_ioctl;
allow hal_fingerprint_default tee_device:chr_file rw_file_perms;
allow hal_fingerprint_default touchfeature_device:chr_file rw_file_perms;
allow hal_fingerprint_default uhid_device:chr_file rw_file_perms;
allow hal_fingerprint_default vendor_qdsp_device:chr_file r_file_perms;
allow hal_fingerprint_default vendor_sysfs_fod:file rw_file_perms;
allow hal_fingerprint_default vendor_sysfs_graphics:file rw_file_perms;
allow hal_fingerprint_default vendor_xdsp_device:chr_file r_file_perms;
r_dir_file(hal_fingerprint_default, firmware_file)
get_prop(hal_fingerprint_default, vendor_adsprpc_prop)
set_prop(hal_fingerprint_default, vendor_fp_prop)
hal_client_domain(hal_fingerprint_default, vendor_hal_perf)
add_hwservice(hal_fingerprint_default, hal_fingerprint_hwservice_xiaomi)
add_hwservice(hal_fingerprint_default, hal_swfingerprint_hwservice)