android_device_xiaomi_sm835.../sepolicy/vendor/hal_fingerprint_default.te
Alexander Winkowski af39848862 sm8350-common: sepolicy: Simplify fingerprint rules
Reuse existing AOSP fingerprint_vendor_data_file label

Change-Id: I8632de158050edf87e1b04ec83f0c8c3a61ff0c0
2024-05-20 18:02:56 +02:00

36 lines
1.6 KiB
Plaintext

type vendor_fingerprint_device, dev_type;
type vendor_hal_fingerprint_hwservice_xiaomi, hwservice_manager_type;
type vendor_sysfs_udfps, sysfs_type, fs_type;
vendor_restricted_prop(vendor_fp_prop)
vendor_internal_prop(vendor_fp_info_prop)
# Binder
add_hwservice(hal_fingerprint_default, vendor_hal_fingerprint_hwservice_xiaomi)
allow hal_fingerprint_default vendor_hal_perf_default:binder call;
allow hal_fingerprint_default vendor_hal_perf_hwservice:hwservice_manager find;
# Netlink_socket
allow hal_fingerprint_default self:netlink_socket create_socket_perms_no_ioctl;
# Props
set_prop(hal_fingerprint_default, vendor_fp_prop)
set_prop(hal_fingerprint_default, vendor_fp_info_prop)
# Sysfs
allow hal_fingerprint_default sysfs_rtc:dir r_dir_perms;
allow hal_fingerprint_default sysfs_rtc:file rw_file_perms;
allow hal_fingerprint_default vendor_sysfs_spss:dir r_dir_perms;
allow hal_fingerprint_default vendor_sysfs_spss:file rw_file_perms;
allow hal_fingerprint_default vendor_sysfs_fingerprint:dir r_dir_perms;
allow hal_fingerprint_default vendor_sysfs_fingerprint:file rw_file_perms;
allow hal_fingerprint_default vendor_sysfs_udfps:file rw_file_perms;
allow hal_fingerprint_default vendor_sysfs_graphics:dir r_dir_perms;
allow hal_fingerprint_default vendor_sysfs_graphics:file rw_file_perms;
# Dev nodes
allow hal_fingerprint_default tee_device:chr_file rw_file_perms;
allow hal_fingerprint_default uhid_device:chr_file rw_file_perms;
allow hal_fingerprint_default vendor_fingerprint_device:chr_file rw_file_perms;
allow hal_fingerprint_default input_device:dir r_dir_perms;
allow hal_fingerprint_default input_device:chr_file rw_file_perms;