sm8150-common: sepolicy: Address some of hal_fingerprint_default denials
* There's definitely more to come but that's for later. Change-Id: I677fd0f80e31f38b4cfc3219f5369004d5eb238a
This commit is contained in:
parent
cc62607f4e
commit
661f24333d
|
@ -0,0 +1,20 @@
|
||||||
|
allow hal_fingerprint_default self:netlink_socket create_socket_perms_no_ioctl;
|
||||||
|
|
||||||
|
# Allow binder communication with hal_perf_default
|
||||||
|
binder_call(hal_fingerprint_default, hal_perf_default)
|
||||||
|
|
||||||
|
# Allow hal_fingerprint_default to find hal_perf_hwservice
|
||||||
|
allow hal_fingerprint_default hal_perf_hwservice:hwservice_manager find;
|
||||||
|
|
||||||
|
# Allow hal_fingerprint_default to read and write to fingerprintd_device
|
||||||
|
allow hal_fingerprint_default fingerprintd_device:chr_file rw_file_perms;
|
||||||
|
|
||||||
|
# Allow hal_fingerprint_default to read and write to qdsp_device
|
||||||
|
allow hal_fingerprint_default qdsp_device:chr_file rw_file_perms;
|
||||||
|
|
||||||
|
# Allow hal_fingerprint_default to read and write to tee_device
|
||||||
|
allow hal_fingerprint_default tee_device:chr_file rw_file_perms;
|
||||||
|
|
||||||
|
# Allow hal_fingerprint_default to read and write to proc_touchpanel
|
||||||
|
allow hal_fingerprint_default proc_touchpanel:dir search;
|
||||||
|
allow hal_fingerprint_default proc_touchpanel:file rw_file_perms;
|
Loading…
Reference in New Issue