diff --git a/sepolicy/vendor/hal_fingerprint_default.te b/sepolicy/vendor/hal_fingerprint_default.te index 52449e63..898cdd15 100644 --- a/sepolicy/vendor/hal_fingerprint_default.te +++ b/sepolicy/vendor/hal_fingerprint_default.te @@ -22,3 +22,6 @@ allow hal_fingerprint_default proc_touchpanel:file rw_file_perms; # Allow hal_fingerprint_default access to sysfs nodes allow hal_fingerprint_default sysfs_fod:file rw_file_perms; allow hal_fingerprint_default sysfs_aod:file r_file_perms; + +# Allow hal_fingerprint_default to set vendor_fingerprint_prop +set_prop(hal_fingerprint_default, vendor_fingerprint_prop) diff --git a/sepolicy/vendor/property.te b/sepolicy/vendor/property.te new file mode 100644 index 00000000..9747ab6a --- /dev/null +++ b/sepolicy/vendor/property.te @@ -0,0 +1,2 @@ +# Fingerprint properties +type vendor_fingerprint_prop, property_type; diff --git a/sepolicy/vendor/property_contexts b/sepolicy/vendor/property_contexts index 8ed1348b..6d20e50e 100644 --- a/sepolicy/vendor/property_contexts +++ b/sepolicy/vendor/property_contexts @@ -1,3 +1,7 @@ # Camera vendor.camera. u:object_r:vendor_camera_prop:s0 camera.OPpictureId u:object_r:vendor_camera_prop:s0 + +# Fingerprint +persist.vendor.sys.fp u:object_r:vendor_fingerprint_prop:s0 +persist.vendor.oem.fp u:object_r:vendor_fingerprint_prop:s0