summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAndreas Schneider <asn@cryptomilk.org>2020-03-11 16:26:18 +0100
committerAndreas Schneider <asn@cryptomilk.org>2020-03-11 20:42:53 +0100
commit6d42fe1c21d0da31abcdbdb746254d0f63c5b1e5 (patch)
treef6291b62862bb73cd174662717e52c2dc8062db4
parentff91532336922130b6e88ce7cc2a08c848364e28 (diff)
downloadandroid_device_lineage_sepolicy-6d42fe1c21d0da31abcdbdb746254d0f63c5b1e5.tar.gz
android_device_lineage_sepolicy-6d42fe1c21d0da31abcdbdb746254d0f63c5b1e5.tar.bz2
android_device_lineage_sepolicy-6d42fe1c21d0da31abcdbdb746254d0f63c5b1e5.zip
exynos: Add hal_lineage_livedisplay policy
Change-Id: I82c9c45d6a7e9b153063af65d7f382e33768fcc7
-rw-r--r--exynos/sepolicy.mk23
-rw-r--r--exynos/system/file_contexts2
-rw-r--r--exynos/system/hal_lineage_livedisplay_exynos.te12
-rw-r--r--exynos/vendor/file_contexts2
-rw-r--r--exynos/vendor/hal_lineage_livedisplay_exynos.te8
5 files changed, 47 insertions, 0 deletions
diff --git a/exynos/sepolicy.mk b/exynos/sepolicy.mk
new file mode 100644
index 0000000..56097ea
--- /dev/null
+++ b/exynos/sepolicy.mk
@@ -0,0 +1,23 @@
+#
+# This policy configuration will be used by all exynos products
+# that inherit from Lineage
+#
+
+ifeq ($(TARGET_COPY_OUT_VENDOR), vendor)
+ifeq ($(BOARD_VENDORIMAGE_FILE_SYSTEM_TYPE),)
+TARGET_USES_PREBUILT_VENDOR_SEPOLICY ?= true
+endif
+endif
+
+BOARD_PLAT_PRIVATE_SEPOLICY_DIR += \
+ device/lineage/sepolicy/exynos/private
+
+ifeq ($(TARGET_USES_PREBUILT_VENDOR_SEPOLICY), true)
+BOARD_PLAT_PRIVATE_SEPOLICY_DIR += \
+ device/lineage/sepolicy/exynos/dynamic \
+ device/lineage/sepolicy/exynos/system
+else
+BOARD_SEPOLICY_DIRS += \
+ device/lineage/sepolicy/exynos/dynamic \
+ device/lineage/sepolicy/exynos/vendor
+endif
diff --git a/exynos/system/file_contexts b/exynos/system/file_contexts
new file mode 100644
index 0000000..bcaf8af
--- /dev/null
+++ b/exynos/system/file_contexts
@@ -0,0 +1,2 @@
+# LiveDisplay
+/system/bin/hw/lineage\.livedisplay@[0-9]\.[0-9]-service.samsung-exynos u:object_r:hal_lineage_livedisplay_exynos_exec:s0
diff --git a/exynos/system/hal_lineage_livedisplay_exynos.te b/exynos/system/hal_lineage_livedisplay_exynos.te
new file mode 100644
index 0000000..3000524
--- /dev/null
+++ b/exynos/system/hal_lineage_livedisplay_exynos.te
@@ -0,0 +1,12 @@
+type hal_lineage_livedisplay_exynos, coredomain, domain;
+hal_server_domain(hal_lineage_livedisplay_exynos, hal_lineage_livedisplay)
+
+type hal_lineage_livedisplay_exynos_exec, exec_type, system_file_type, file_type;
+init_daemon_domain(hal_lineage_livedisplay_exynos)
+
+type hal_display_color_hwservice, hwservice_manager_type;
+allow hal_lineage_livedisplay_exynos hal_display_color_hwservice:hwservice_manager find;
+
+type hal_display_color_default, domain;
+binder_call(hal_lineage_livedisplay_exynos, hal_display_color_default)
+binder_use(hal_lineage_livedisplay_exynos)
diff --git a/exynos/vendor/file_contexts b/exynos/vendor/file_contexts
new file mode 100644
index 0000000..a5b7884
--- /dev/null
+++ b/exynos/vendor/file_contexts
@@ -0,0 +1,2 @@
+# LiveDisplay HAL
+/(vendor|system/vendor)/bin/hw/vendor\.lineage\.livedisplay@[0-9]\.[0-9]-service\.samsung-exynos u:object_r:hal_lineage_livedisplay_exynos_exec:s0
diff --git a/exynos/vendor/hal_lineage_livedisplay_exynos.te b/exynos/vendor/hal_lineage_livedisplay_exynos.te
new file mode 100644
index 0000000..c3b0dc1
--- /dev/null
+++ b/exynos/vendor/hal_lineage_livedisplay_exynos.te
@@ -0,0 +1,8 @@
+type hal_lineage_livedisplay_exynos, domain;
+hal_server_domain(hal_lineage_livedisplay_exynos, hal_lineage_livedisplay)
+
+type hal_lineage_livedisplay_exynos_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_lineage_livedisplay_exynos)
+
+# Allow LiveDisplay HAL's default implementation to use vendor-binder service
+vndbinder_use(hal_lineage_livedisplay_exynos)