diff options
| author | Avijit Kanti Das <avijitnsec@codeaurora.org> | 2014-10-21 17:11:11 -0700 |
|---|---|---|
| committer | Avijit Kanti Das <avijitnsec@codeaurora.org> | 2014-10-22 12:59:06 -0700 |
| commit | 808ae2fff73e081862330eb6fb249b644cf145cb (patch) | |
| tree | bec0c84d7169a780651464e86b07217ce7a1ad0b /common/mm-pp-daemon.te | |
| parent | f1e16bf2bbca6d4373eafcb569457762e7b7fea0 (diff) | |
| download | android_device_qcom_sepolicy-808ae2fff73e081862330eb6fb249b644cf145cb.tar.gz android_device_qcom_sepolicy-808ae2fff73e081862330eb6fb249b644cf145cb.tar.bz2 android_device_qcom_sepolicy-808ae2fff73e081862330eb6fb249b644cf145cb.zip | |
Seandroid: Enable PP daemon at boot
Enables pp-daemon to start at boot and adds the necessary selinux
policies for it's operation
Change-Id: I450bada4a8f5c5b49e59c2c179897d306a5e8791
Diffstat (limited to 'common/mm-pp-daemon.te')
| -rwxr-xr-x | common/mm-pp-daemon.te | 42 |
1 files changed, 42 insertions, 0 deletions
diff --git a/common/mm-pp-daemon.te b/common/mm-pp-daemon.te new file mode 100755 index 00000000..b515c477 --- /dev/null +++ b/common/mm-pp-daemon.te @@ -0,0 +1,42 @@ +type mm-pp-daemon, domain; +type mm-pp-daemon_exec, exec_type, file_type; + +init_daemon_domain(mm-pp-daemon) + +#============= mm-pp-daemon ============== +#Need to use fb ioctls to communicate with kernel +allow mm-pp-daemon graphics_device:chr_file rw_file_perms; +allow mm-pp-daemon graphics_device:dir search; + +# Allow reading calibration data from persist +allow mm-pp-daemon persist_file:file r_file_perms; +allow mm-pp-daemon persist_file:dir search; + +# Allow pp daemon to save settings to /data +allow mm-pp-daemon display_config:file rw_file_perms; + +#Calibration can only be done on userdebug or eng builds +userdebug_or_eng(` + # Display calibration service opens /dev/diag in order to communicate with the + # target device + allow mm-pp-daemon diag_device:chr_file rw_file_perms; + + # QDCM needs to trigger screen refreshes in some cases to reach the + # convergent state + binder_use(mm-pp-daemon) + binder_call(mm-pp-daemon, system_server) + binder_call(mm-pp-daemon, surfaceflinger) + + # This allows pp-daemon to use shell commands to blank + # the display - it uses input keyevent to do this + allow mm-pp-daemon shell_exec:file rx_file_perms; + allow mm-pp-daemon system_file:file execute_no_trans; + allow mm-pp-daemon zygote_exec:file rx_file_perms; + + # Allow writing to persist + allow mm-pp-daemon persist_file:file rw_file_perms; + + # Allow mm-pp-daemon to change the brightness of the target during display + # calibration + allow mm-pp-daemon sysfs:file rw_file_perms; +') |