diff options
| author | Eric Jeong <ericjeong@google.com> | 2020-05-05 22:22:33 -0700 |
|---|---|---|
| committer | Eric Jeong <ericjeong@google.com> | 2020-05-06 09:11:48 -0700 |
| commit | 735d1a2357a5562a0f1cd0afa8eedcb6fa818229 (patch) | |
| tree | d0f1aef6c5f277fc4ea8a565521a118cd5b6b9b5 /common | |
| parent | a7cbd506401302ad696aa6871dbac866d14d5096 (diff) | |
| download | device_generic_car-735d1a2357a5562a0f1cd0afa8eedcb6fa818229.tar.gz device_generic_car-735d1a2357a5562a0f1cd0afa8eedcb6fa818229.tar.bz2 device_generic_car-735d1a2357a5562a0f1cd0afa8eedcb6fa818229.zip | |
Add sepolicy to register VHAL to car watchdog
- VHAL needs to be a carwatchdogclient_domain.
- system_server should be able to kill hal_vehicle_server.
Bug: 154367059
Bug: 154262220
Test: dumpsys android.automotive.watchdog.ICarWatchdog/default and check
if vehicle hal is registered as a client
Change-Id: Id450c5754bb6b845b4605b4d3877a3a56e5310cf
Diffstat (limited to 'common')
| -rw-r--r-- | common/car.mk | 3 | ||||
| -rw-r--r-- | common/sepolicy/hal_vehicle_default.te | 3 | ||||
| -rw-r--r-- | common/sepolicy/system_server.te | 2 |
3 files changed, 8 insertions, 0 deletions
diff --git a/common/car.mk b/common/car.mk index 7c14b01..01ae36b 100644 --- a/common/car.mk +++ b/common/car.mk @@ -72,4 +72,7 @@ PRODUCT_SYSTEM_DEFAULT_PROPERTIES := \ android.car.number_pre_created_users=1 \ android.car.number_pre_created_guests=1 +# Additional selinux policy +BOARD_SEPOLICY_DIRS += device/generic/car/common/sepolicy + $(call inherit-product, packages/services/Car/car_product/build/car.mk) diff --git a/common/sepolicy/hal_vehicle_default.te b/common/sepolicy/hal_vehicle_default.te new file mode 100644 index 0000000..c0a9698 --- /dev/null +++ b/common/sepolicy/hal_vehicle_default.te @@ -0,0 +1,3 @@ +# Configuration for register VHAL to car watchdog +carwatchdog_client_domain(hal_vehicle_default) +binder_use(hal_vehicle_default) diff --git a/common/sepolicy/system_server.te b/common/sepolicy/system_server.te new file mode 100644 index 0000000..a9ce1b1 --- /dev/null +++ b/common/sepolicy/system_server.te @@ -0,0 +1,2 @@ +# Allow system_server to kill vehicle HAL +allow system_server hal_vehicle_server:process sigkill; |