summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorandroid-build-team Robot <android-build-team-robot@google.com>2020-06-11 01:11:09 +0000
committerandroid-build-team Robot <android-build-team-robot@google.com>2020-06-11 01:11:09 +0000
commitcc9a12a620b4c99bb9771a8ac4e591bb21a7f3ff (patch)
tree079d6dded7511ac9cf7a5270c7954928282fcecc
parentd92e1ac7f2d5ca3a00491f2122b93378118e2833 (diff)
parent080886bc8264265559e453b93957f9c8b0a0650c (diff)
downloadplatform_hardware_google_pixel-sepolicy-cc9a12a620b4c99bb9771a8ac4e591bb21a7f3ff.tar.gz
platform_hardware_google_pixel-sepolicy-cc9a12a620b4c99bb9771a8ac4e591bb21a7f3ff.tar.bz2
platform_hardware_google_pixel-sepolicy-cc9a12a620b4c99bb9771a8ac4e591bb21a7f3ff.zip
Snap for 6578268 from 080886bc8264265559e453b93957f9c8b0a0650c to rvc-release
Change-Id: I90acfec8929367e994e7b46f9fbefccbcdcfb512
-rw-r--r--turbo_adapter/seapp_contexts1
-rw-r--r--turbo_adapter/turbo_adapter.te13
2 files changed, 14 insertions, 0 deletions
diff --git a/turbo_adapter/seapp_contexts b/turbo_adapter/seapp_contexts
new file mode 100644
index 0000000..4f983be
--- /dev/null
+++ b/turbo_adapter/seapp_contexts
@@ -0,0 +1 @@
+user=_app seinfo=platform name=com.google.android.turboadapter domain=turbo_adapter type=app_data_file levelFrom=all
diff --git a/turbo_adapter/turbo_adapter.te b/turbo_adapter/turbo_adapter.te
new file mode 100644
index 0000000..b2f0202
--- /dev/null
+++ b/turbo_adapter/turbo_adapter.te
@@ -0,0 +1,13 @@
+# Normal platform_apps cannot access PowerHAL, so we need to define our own domain. Unfortunately
+# this means that TurboAdapter doesn't get the platform_app permissions any more, so we need to
+# list everything that it needs here.
+
+type turbo_adapter, domain, coredomain;
+
+app_domain(turbo_adapter)
+
+# To use ServiceManager
+allow turbo_adapter app_api_service:service_manager find;
+
+# To find and call hal_power_default so turbo can obtain the service extension (IPowerExt)
+hal_client_domain(turbo_adapter, hal_power)