diff options
| author | Lior Barenboim <liorb@codeaurora.org> | 2016-05-06 11:11:52 -0700 |
|---|---|---|
| committer | Lior Barenboim <liorb@codeaurora.org> | 2016-05-22 11:19:23 +0300 |
| commit | 04e624cffdc608cf956c6ba62c210dba310d3e1a (patch) | |
| tree | f11feeed3ef405582b1d27a646b65d019ab21d02 | |
| parent | f8fea2041087c11cfa3bf8f3bbec4199ed41bcd2 (diff) | |
| download | android_device_qcom_sepolicy-caf/LA.HB.1.3.1.tar.gz android_device_qcom_sepolicy-caf/LA.HB.1.3.1.tar.bz2 android_device_qcom_sepolicy-caf/LA.HB.1.3.1.zip | |
seandroid: allow QFP dameon access to Android servicescaf/LA.HB.1.3.1
Allow the QFP daemon to connect to a service exposed by the
Fingerprint Android service for access to Android functions
CRs-fixed: 1012634
Change-Id: I648a37e5c95564d522a9059f2fefa6a94bba162e
| -rw-r--r-- | common/qfp-daemon.te | 3 | ||||
| -rw-r--r-- | common/service.te | 1 | ||||
| -rw-r--r-- | common/service_contexts | 1 | ||||
| -rw-r--r-- | common/system_app.te | 1 |
4 files changed, 6 insertions, 0 deletions
diff --git a/common/qfp-daemon.te b/common/qfp-daemon.te index b154c54d..d09c24cc 100644 --- a/common/qfp-daemon.te +++ b/common/qfp-daemon.te @@ -43,6 +43,9 @@ allow qfp-daemon qfp-daemon_data_file:file create_file_perms; # Access to tee_device allow qfp-daemon tee_device:chr_file rw_file_perms; +# Access QFP Android Proxy +allow qfp-daemon qfp_proxy_service:service_manager find; + # Add IQfpService service allow qfp-daemon iqfp_service:service_manager add; diff --git a/common/service.te b/common/service.te index 65b6222f..9e5c96a5 100644 --- a/common/service.te +++ b/common/service.te @@ -1,4 +1,5 @@ type iqfp_service, service_manager_type; +type qfp_proxy_service, service_manager_type; type atfwd_service, service_manager_type; type per_mgr_service, service_manager_type; type dpmservice, service_manager_type; diff --git a/common/service_contexts b/common/service_contexts index bce0192f..86e1381a 100644 --- a/common/service_contexts +++ b/common/service_contexts @@ -1,4 +1,5 @@ android.apps.IQfpService u:object_r:iqfp_service:s0 +android.apps.IQfpAndroidService u:object_r:qfp_proxy_service:s0 AtCmdFwd u:object_r:atfwd_service:s0 dpmservice u:object_r:dpmservice:s0 listen.service u:object_r:mediaserver_service:s0 diff --git a/common/system_app.te b/common/system_app.te index f88097fb..2de3fe8e 100644 --- a/common/system_app.te +++ b/common/system_app.te @@ -16,6 +16,7 @@ allow system_app { # access to color service SDK color_service STAProxyService + qfp_proxy_service }:service_manager add; # access to perflock |