sm8150-common: sepolicy: Address some of hal_fingerprint_default denials

* There's definitely more to come but that's for later.

Change-Id: I677fd0f80e31f38b4cfc3219f5369004d5eb238a
This commit is contained in:
LuK1337 2019-07-08 12:55:38 +02:00
parent cc62607f4e
commit 661f24333d
1 changed files with 20 additions and 0 deletions

View File

@ -0,0 +1,20 @@
allow hal_fingerprint_default self:netlink_socket create_socket_perms_no_ioctl;
# Allow binder communication with hal_perf_default
binder_call(hal_fingerprint_default, hal_perf_default)
# Allow hal_fingerprint_default to find hal_perf_hwservice
allow hal_fingerprint_default hal_perf_hwservice:hwservice_manager find;
# Allow hal_fingerprint_default to read and write to fingerprintd_device
allow hal_fingerprint_default fingerprintd_device:chr_file rw_file_perms;
# Allow hal_fingerprint_default to read and write to qdsp_device
allow hal_fingerprint_default qdsp_device:chr_file rw_file_perms;
# Allow hal_fingerprint_default to read and write to tee_device
allow hal_fingerprint_default tee_device:chr_file rw_file_perms;
# Allow hal_fingerprint_default to read and write to proc_touchpanel
allow hal_fingerprint_default proc_touchpanel:dir search;
allow hal_fingerprint_default proc_touchpanel:file rw_file_perms;