summaryrefslogtreecommitdiff
path: root/sepolicy/vendor
diff options
context:
space:
mode:
authorPIPIPIG233666 <pig.priv@gmail.com>2020-01-02 19:14:58 +0100
committerMichael Bestas <mkbestas@lineageos.org>2020-04-30 00:48:53 +0300
commitac69b5cccff2b4769e1ad12d4428de4748138285 (patch)
tree998f42030c9b93bc6342fb47bbc267acf389676e /sepolicy/vendor
parent6c0bfd646b2630f8a7faa5af03b8859b20a80324 (diff)
sdm660-common: Address fp denials
Change-Id: Ie2abb5480d3442e5f64d532561ce657362f9f081
Diffstat (limited to 'sepolicy/vendor')
-rw-r--r--sepolicy/vendor/hal_fingerprint_sdm660.te4
-rw-r--r--sepolicy/vendor/hwservice_contexts8
-rw-r--r--sepolicy/vendor/property_contexts1
3 files changed, 9 insertions, 4 deletions
diff --git a/sepolicy/vendor/hal_fingerprint_sdm660.te b/sepolicy/vendor/hal_fingerprint_sdm660.te
index 0bbf9d7..6cef299 100644
--- a/sepolicy/vendor/hal_fingerprint_sdm660.te
+++ b/sepolicy/vendor/hal_fingerprint_sdm660.te
@@ -25,14 +25,14 @@ binder_use(hal_fingerprint_sdm660)
r_dir_file(hal_fingerprint_sdm660, firmware_file)
add_service(hal_fingerprint_sdm660, goodixvnd_service)
-add_hwservice(hal_fingerprint_sdm660, goodixhw_service)
allow hal_fingerprint_sdm660 vndbinder_device:chr_file ioctl;
-get_prop(hal_fingerprint_sdm660, hal_fingerprint_prop)
set_prop(hal_fingerprint_sdm660, hal_fingerprint_prop)
vndbinder_use(hal_fingerprint_sdm660)
dontaudit hal_fingerprint_sdm660 { media_rw_data_file sdcardfs}:dir search;
dontaudit hal_fingerprint_sdm660 media_rw_data_file:dir { read open };
+dontaudit hal_fingerprint_sdm660 hal_perf_hwservice:hwservice_manager find;
+dontaudit hal_fingerprint_sdm660 hal_fingerprint_hwservice:hwservice_manager add;
diff --git a/sepolicy/vendor/hwservice_contexts b/sepolicy/vendor/hwservice_contexts
index 14bb48b..1f1df2d 100644
--- a/sepolicy/vendor/hwservice_contexts
+++ b/sepolicy/vendor/hwservice_contexts
@@ -1,3 +1,7 @@
-vendor.goodix.hardware.fingerprint::IGoodixBiometricsFingerprint u:object_r:goodixhw_service:s0
-com.fingerprints.extension::IFingerprintNavigation u:object_r:fpnav_hwservice:s0
+vendor.goodix.hardware.fingerprint::IGoodixBiometricsFingerprint u:object_r:hal_fingerprint_hwservice:s0
+com.fingerprints.extension::IFingerprintEngineering u:object_r:hal_fingerprint_hwservice:s0
+com.fingerprints.extension::IFingerprintSensorTest u:object_r:hal_fingerprint_hwservice:s0
+com.fingerprints.extension::IFingerprintNavigation u:object_r:hal_fingerprint_hwservice:s0
+com.fingerprints.extension::IFingerprintCalibration u:object_r:hal_fingerprint_hwservice:s0
+com.fingerprints.extension::IFingerprintSenseTouch u:object_r:hal_fingerprint_hwservice:s0
vendor.xiaomi.hardware.mlipay::IMlipayService u:object_r:hal_mlipay_hwservice:s0
diff --git a/sepolicy/vendor/property_contexts b/sepolicy/vendor/property_contexts
index 037565e..b1a0c21 100644
--- a/sepolicy/vendor/property_contexts
+++ b/sepolicy/vendor/property_contexts
@@ -1,5 +1,6 @@
persist.camera. u:object_r:camera_prop:s0
persist.vendor.camera. u:object_r:camera_prop:s0
+ro.boot.fpsensor u:object_r:hal_fingerprint_prop:s0
sys.fp.goodix u:object_r:hal_fingerprint_prop:s0
sys.fp.vendor u:object_r:hal_fingerprint_prop:s0
persist.sys.fp.info u:object_r:hal_fingerprint_prop:s0