diff --git a/sepolicy/vendor/fingerprint.te b/sepolicy/vendor/fingerprint.te index 3939b68..e10962b 100644 --- a/sepolicy/vendor/fingerprint.te +++ b/sepolicy/vendor/fingerprint.te @@ -2,10 +2,15 @@ type vendor_mfp-daemon, domain; type vendor_mfp-daemon_exec, exec_type, vendor_file_type, file_type; type vendor_fingerprint_data_file, data_file_type, file_type; type vendor_fingerprint_device, dev_type; +type vendor_fp_prop, vendor_public_property_type, vendor_property_type, property_type; +type vendor_fp_info_prop, vendor_public_property_type, vendor_property_type, property_type; hal_server_domain(vendor_mfp-daemon, hal_fingerprint) init_daemon_domain(vendor_mfp-daemon) +set_prop(vendor_mfp-daemon, vendor_fp_prop) +set_prop(vendor_mfp-daemon, vendor_fp_info_prop) + allow vendor_mfp-daemon vendor_fingerprint_data_file:dir create_dir_perms; allow vendor_mfp-daemon vendor_fingerprint_data_file:file create_file_perms; allow vendor_mfp-daemon tee_device:chr_file rw_file_perms; diff --git a/sepolicy/vendor/property_contexts b/sepolicy/vendor/property_contexts index c866d8e..372dd61 100644 --- a/sepolicy/vendor/property_contexts +++ b/sepolicy/vendor/property_contexts @@ -1,2 +1,7 @@ +# Fingerprint +persist.vendor.sys.fp. u:object_r:vendor_fp_prop:s0 +persist.vendor.sys.fp.info u:object_r:vendor_fp_info_prop:s0 +persist.vendor.sys.fp.uid u:object_r:vendor_fp_info_prop:s0 + # SPU persist.vendor.security.spuari. u:object_r:vendor_security_spuari_prop:s0