pa-fazil
/
android_device_qcom_common
mirror of https://github.com/fazilsheik96/android_device_qcom_common.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

common: sepolicy: legacy: Add sepolicy rules for TZAS 

Add the sepolicy rules for trustzone
access service to provide it access to
various vendor and android services.

Change-Id: I80f8bcb9a917ed18331fa3b92f1e8c65f8c631ad
[Jprimero15: Change to vendor_hal_perf to align with our changes]
Signed-off-by: Jprimero15 <jprimero15@aospa.co>
This commit is contained in:
Himanshu Agrawal 2023-03-21 15:56:32 +05:30 committed by Jprimero15
parent 3acbd9d825
commit 4fd34ca8ae
No known key found for this signature in database
GPG Key ID: 5FEAF384B6BF82AD
2 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
sepolicy/legacy/vendor/common/seapp_contexts vendored
View File

@ -67,3 +67,6 @@ user=_app seinfo=platform name=com.qti.phone domain=vendor_qtelephony type=app_d
#allow embms msdc app to access embmssl hal
user=_app seinfo=platform name=com.qti.ltebc domain=vendor_embmssl_app type=app_data_file levelFrom=all
#Add new domain for trustzone access app
user=_app seinfo=platform name=com.qualcomm.qti.qms.service.trustzoneaccess domain=vendor_tzas_app type=app_data_file levelfrom=all

14
sepolicy/legacy/vendor/common/tzas_app.te vendored Normal file
View File

@ -0,0 +1,14 @@
# Copyright (c) 2022 Qualcomm Innovation Center, Inc. All rights reserved.
# SPDX-License-Identifier: BSD-3-Clause-Clear
type vendor_tzas_app, domain;
app_domain(vendor_tzas_app)
net_domain(vendor_tzas_app)
unix_socket_connect(vendor_tzas_app, ssgtzd, ssgtzd)
binder_call(vendor_tzas_app, vendor_hal_perf_default)
allow vendor_tzas_app app_api_service:service_manager find;
allow vendor_tzas_app vendor_hal_perf_hwservice:hwservice_manager find;