From a754ddf83838f0cecf3e85c2a9231fbd321daa63 Mon Sep 17 00:00:00 2001 From: Akshay Joshi Date: Mon, 11 Jun 2018 15:51:53 -0700 Subject: Add MTC specific SELinux permissions for VrCore Bug: 78638290 Test: boot Change-Id: I560d3907088336aff8bd43747f1a299b67a63e9f --- vrcore/sepolicy_mtc/vrcore_app.te | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 vrcore/sepolicy_mtc/vrcore_app.te diff --git a/vrcore/sepolicy_mtc/vrcore_app.te b/vrcore/sepolicy_mtc/vrcore_app.te new file mode 100644 index 0000000..a037610 --- /dev/null +++ b/vrcore/sepolicy_mtc/vrcore_app.te @@ -0,0 +1,13 @@ +### +### MTC specific VrCore permissions +### + +allow vrcore_app persist_file:dir search; + +# allow vrcore to access dsp +allow vrcore_app qdsp_device:chr_file r_file_perms; +r_dir_file(vrcore_app, adsprpcd_file) + +# allow vrcore to access sensor service +allow vrcore_app fwk_sensor_hwservice:hwservice_manager find; +allow vrcore_app sensorservice_service:service_manager find; -- cgit v1.2.3 From 9749dd0fc9ef95276a1ca112078e01323889c6b4 Mon Sep 17 00:00:00 2001 From: Jiwen 'Steve' Cai Date: Wed, 13 Jun 2018 21:57:56 -0700 Subject: Allow VrCore to access tango calibration file Bug: 78638290 Bug: 80530644 Test: VrCore can load device calibration. Change-Id: I153bbf0dac4d407f30d0de672a09773396537f8c --- vrcore/sepolicy_mtc/vrcore_app.te | 3 +++ 1 file changed, 3 insertions(+) diff --git a/vrcore/sepolicy_mtc/vrcore_app.te b/vrcore/sepolicy_mtc/vrcore_app.te index a037610..3dda5f2 100644 --- a/vrcore/sepolicy_mtc/vrcore_app.te +++ b/vrcore/sepolicy_mtc/vrcore_app.te @@ -11,3 +11,6 @@ r_dir_file(vrcore_app, adsprpcd_file) # allow vrcore to access sensor service allow vrcore_app fwk_sensor_hwservice:hwservice_manager find; allow vrcore_app sensorservice_service:service_manager find; + +# allow vrcore to access /persist/tango/calibration.xml +r_dir_file(vrcore_app, tango_data_file); \ No newline at end of file -- cgit v1.2.3