diff options
| author | Baji Patthan <bpatth@codeaurora.org> | 2015-12-08 12:57:52 -0800 |
|---|---|---|
| committer | Gerrit - the friendly Code Review server <code-review@localhost> | 2016-01-13 07:47:37 -0800 |
| commit | 6626b28c34400cb2c8bc79c7a05736f455f9c9f2 (patch) | |
| tree | 135664f8e3fe413c9220bd6557b5c81e481e39ae | |
| parent | 81c37411a955e058cd097608cbefb5221c48b498 (diff) | |
| download | android_device_qcom_sepolicy-6626b28c34400cb2c8bc79c7a05736f455f9c9f2.tar.gz android_device_qcom_sepolicy-6626b28c34400cb2c8bc79c7a05736f455f9c9f2.tar.bz2 android_device_qcom_sepolicy-6626b28c34400cb2c8bc79c7a05736f455f9c9f2.zip | |
"sepolicy:common: QFP daemon read permissions to qc_senseid"
QFP daemon needs to read calibration data from /persist/data/qc_senseid
CRs-Fixed: 952095
Change-Id: I09233b1eedb5f438accc6ca3a22d0db2390ead54
| -rw-r--r-- | common/file.te | 1 | ||||
| -rw-r--r-- | common/file_contexts | 1 | ||||
| -rw-r--r-- | common/qfp-daemon.te | 4 | ||||
| -rw-r--r-- | common/qseecomd.te | 2 |
4 files changed, 8 insertions, 0 deletions
diff --git a/common/file.te b/common/file.te index 43e3c1f0..71bd123b 100644 --- a/common/file.te +++ b/common/file.te @@ -146,6 +146,7 @@ type persist_usf_file, file_type; #qfp-daemon type qfp-daemon_data_file, file_type, data_file_type; +type persist_qc_senseid_file, file_type; # dts notifier files type dts_data_file, file_type, data_file_type; diff --git a/common/file_contexts b/common/file_contexts index c88077f5..a80af5e9 100644 --- a/common/file_contexts +++ b/common/file_contexts @@ -314,6 +314,7 @@ /persist/data(/.*)? u:object_r:persist_drm_file:s0 /persist/data/tz(/.*)? u:object_r:persist_drm_file:s0 /persist/data/sfs(/.*)? u:object_r:persist_drm_file:s0 +/persist/qc_senseid(/.*)? u:object_r:persist_qc_senseid_file:s0 /persist/usf(/.*)? u:object_r:persist_usf_file:s0 /persist/hlos_rfs(/.*)? u:object_r:rfs_shared_hlos_file:s0 /persist/display(/.*)? u:object_r:persist_display_file:s0 diff --git a/common/qfp-daemon.te b/common/qfp-daemon.te index 5d2d7a4b..b154c54d 100644 --- a/common/qfp-daemon.te +++ b/common/qfp-daemon.te @@ -55,6 +55,10 @@ allow qfp-daemon qbt1000_device:chr_file rw_file_perms; # R dir perms for firmware dir r_dir_file(qfp-daemon, firmware_file) +# R dir perms for persist qc_senseid dir +r_dir_file(qfp-daemon, persist_file) +r_dir_file(qfp-daemon, persist_qc_senseid_file) + # Allow qfp daemon access to system server binder_call(qfp-daemon, system_server); diff --git a/common/qseecomd.te b/common/qseecomd.te index f97849d6..0c077ea1 100644 --- a/common/qseecomd.te +++ b/common/qseecomd.te @@ -70,6 +70,8 @@ allow tee system_prop:property_service set; #allow access to qfp-daemon allow tee qfp-daemon_data_file:dir create_dir_perms; allow tee qfp-daemon_data_file:file create_file_perms; +allow tee persist_qc_senseid_file:dir create_dir_perms; +allow tee persist_qc_senseid_file:file create_file_perms; #allow access to fingerprintd data file allow tee fingerprintd_data_file:dir create_dir_perms; |