summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDavide Garberi <dade.garberi@gmail.com>2019-09-19 19:43:48 +0200
committerMichael Bestas <mkbestas@lineageos.org>2020-04-30 00:48:53 +0300
commit1aa2263a21d2f4059af70f0b8615ea006024baeb (patch)
tree1a920edcdaee1b8b7c86315824b5e84a10c3902f
parentfb2de9c6e2d161d3b8fc3532bae0ce2dcef34e41 (diff)
sdm660-common: biometrics: Address fingerprint denials
* Mostly just for goodix Change-Id: Ia8fb90fca742a220e31f206b344026c69e751bb0
-rw-r--r--sepolicy/vendor/init_fingerprint.te4
-rw-r--r--sepolicy/vendor/tee.te2
2 files changed, 5 insertions, 1 deletions
diff --git a/sepolicy/vendor/init_fingerprint.te b/sepolicy/vendor/init_fingerprint.te
index b45cdd6..9ef78c4 100644
--- a/sepolicy/vendor/init_fingerprint.te
+++ b/sepolicy/vendor/init_fingerprint.te
@@ -11,4 +11,6 @@ allow init_fingerprint vendor_toolbox_exec:file rx_file_perms;
# Allow to delete file
allow init_fingerprint persist_file:dir search;
allow init_fingerprint persist_drm_file:dir { read search open write remove_name };
-allow init_fingerprint persist_drm_file:file { getattr unlink }; \ No newline at end of file
+allow init_fingerprint persist_drm_file:file { getattr unlink };
+
+allow init_fingerprint system_data_file:file getattr;
diff --git a/sepolicy/vendor/tee.te b/sepolicy/vendor/tee.te
index 0a124bc..6c2c9b1 100644
--- a/sepolicy/vendor/tee.te
+++ b/sepolicy/vendor/tee.te
@@ -4,3 +4,5 @@ typeattribute tee data_between_core_and_vendor_violators;
allow tee system_data_file:dir r_dir_perms;
allow tee fingerprintd_data_file:dir rw_dir_perms;
allow tee fingerprintd_data_file:file create_file_perms;
+allow tee vendor_data_file:file { read open unlink };
+allow tee vendor_data_file:dir { write remove_name read };