60afa5a8fb
We are going to enforce that each property has an explicit owner, such as system, vendor, or product. This attaches vendor_property_type to properties defined under vendor sepolicy directories. Bug: 159097992 Test: m selinux_policy && boot device Change-Id: Ibed833cd9e5d786e82985ded6bc62abdf8cd9ded
26 lines
852 B
Plaintext
26 lines
852 B
Plaintext
type hal_mlipay_hwservice, hwservice_manager_type;
|
|
|
|
type hal_mlipay_default, domain;
|
|
hal_server_domain(hal_mlipay_default, hal_mlipay)
|
|
|
|
type hal_mlipay_default_exec, exec_type, vendor_file_type, file_type;
|
|
init_daemon_domain(hal_mlipay_default)
|
|
|
|
vendor_public_prop(vendor_mlipay_prop)
|
|
|
|
# Allow hwbinder call from hal client to server
|
|
binder_call(hal_mlipay_client, hal_mlipay_server)
|
|
|
|
# Add hwservice related rules
|
|
add_hwservice(hal_mlipay_server, hal_mlipay_hwservice)
|
|
allow hal_mlipay_client hal_mlipay_hwservice:hwservice_manager find;
|
|
|
|
allow hal_mlipay_default tee_device:chr_file rw_file_perms;
|
|
allow hal_mlipay_default ion_device:chr_file r_file_perms;
|
|
|
|
r_dir_file(hal_mlipay_default, firmware_file)
|
|
set_prop(hal_mlipay_default, vendor_mlipay_prop);
|
|
|
|
get_prop(hal_mlipay_default, vendor_fp_prop)
|
|
get_prop(hal_mlipay_default, vendor_fp_info_prop)
|