sm8350-common: sepolicy: allow fingerprint daemon access to goodix fingerprint device

This commit is contained in:
Cosmin Tanislav 2021-10-13 23:16:31 +03:00
parent 7213c14f5a
commit 0752650296
2 changed files with 3 additions and 0 deletions

View File

@ -13,6 +13,7 @@
/vendor/bin/hw/android\.hardware\.sensors@2.1-service\.xiaomi_sm8350-multihal u:object_r:hal_sensors_default_exec:s0
# Fingerprint
/dev/goodix_fp u:object_r:vendor_fingerprint_device:s0
/mnt/vendor/persist/goodix(/.*)? u:object_r:vendor_fingerprint_data_file:s0
# FOD

View File

@ -1,7 +1,9 @@
type vendor_mfp-daemon, domain;
type vendor_mfp-daemon_exec, exec_type, vendor_file_type, file_type;
type vendor_fingerprint_data_file, data_file_type, file_type;
type vendor_fingerprint_device, dev_type;
allow vendor_mfp-daemon vendor_fingerprint_data_file:dir create_dir_perms;
allow vendor_mfp-daemon vendor_fingerprint_data_file:file create_file_perms;
allow vendor_mfp-daemon tee_device:chr_file rw_file_perms;
allow vendor_mfp-daemon vendor_fingerprint_device:chr_file rwx_file_perms;