diff options
| author | Xin Li <delphij@google.com> | 2020-08-27 10:16:04 -0700 |
|---|---|---|
| committer | Xin Li <delphij@google.com> | 2020-08-27 10:16:04 -0700 |
| commit | 51c9942ad203ce600804676d4cd2c120f7135ff6 (patch) | |
| tree | e1e81cb154005f3cf2d143cd0a7737a2310b7c6e /common/sepolicy | |
| parent | 1c7f995cafb5b6e1017dd29d672caa6e2b451f33 (diff) | |
| parent | 499e6873bb120d18dddc7e7e47d54c5ad3c0b63c (diff) | |
| download | device_generic_car-51c9942ad203ce600804676d4cd2c120f7135ff6.tar.gz device_generic_car-51c9942ad203ce600804676d4cd2c120f7135ff6.tar.bz2 device_generic_car-51c9942ad203ce600804676d4cd2c120f7135ff6.zip | |
Merge Android R (rvc-dev-plus-aosp-without-vendor@6692709)
Bug: 166295507
Merged-In: I5338a728f2160f1ec4d80ed968ed27cd856bfa9f
Change-Id: I239842ee9c420fa1b492a103e52c37e0c864943a
Diffstat (limited to 'common/sepolicy')
| -rw-r--r-- | common/sepolicy/dumpstate.te | 17 | ||||
| -rw-r--r-- | common/sepolicy/file_contexts | 2 | ||||
| -rw-r--r-- | common/sepolicy/hal_vehicle_default.te | 3 | ||||
| -rw-r--r-- | common/sepolicy/system_server.te | 2 |
4 files changed, 22 insertions, 2 deletions
diff --git a/common/sepolicy/dumpstate.te b/common/sepolicy/dumpstate.te new file mode 100644 index 0000000..ad16894 --- /dev/null +++ b/common/sepolicy/dumpstate.te @@ -0,0 +1,17 @@ +# Signal java processes to dump hal_vehicle_default, hal_audiocontrol_default +allow dumpstate { + hal_vehicle_default + hal_audiocontrol_default +}:process signal; + + +# Allow dumpstate to make binder calls to hal_identity, hal_light, hal_power +binder_call(dumpstate, hal_identity_default) +binder_call(dumpstate, hal_light_default) +binder_call(dumpstate, hal_power_default) + +dump_hal(hal_vehicle) +dump_hal(hal_audiocontrol) +dump_hal(hal_identity) +dump_hal(hal_light) +dump_hal(hal_power) diff --git a/common/sepolicy/file_contexts b/common/sepolicy/file_contexts deleted file mode 100644 index ed5712b..0000000 --- a/common/sepolicy/file_contexts +++ /dev/null @@ -1,2 +0,0 @@ -# label the bluetooth@1.0-service.sim or it won't register during system boot -/vendor/bin/hw/android\.hardware\.bluetooth@1\.1-service\.sim u:object_r:hal_bluetooth_default_exec:s0 diff --git a/common/sepolicy/hal_vehicle_default.te b/common/sepolicy/hal_vehicle_default.te new file mode 100644 index 0000000..c0a9698 --- /dev/null +++ b/common/sepolicy/hal_vehicle_default.te @@ -0,0 +1,3 @@ +# Configuration for register VHAL to car watchdog +carwatchdog_client_domain(hal_vehicle_default) +binder_use(hal_vehicle_default) diff --git a/common/sepolicy/system_server.te b/common/sepolicy/system_server.te new file mode 100644 index 0000000..a9ce1b1 --- /dev/null +++ b/common/sepolicy/system_server.te @@ -0,0 +1,2 @@ +# Allow system_server to kill vehicle HAL +allow system_server hal_vehicle_server:process sigkill; |