summaryrefslogtreecommitdiff
path: root/sepolicy
diff options
context:
space:
mode:
authorTri Vo <trong@google.com>2020-06-13 18:33:44 -0700
committerTri Vo <trong@google.com>2020-06-26 16:04:09 -0700
commite1e0587c1a164936bdd10ea416d8785019688f82 (patch)
tree10e21866d2f34636c2fe5b69eadbd7ff64b745f3 /sepolicy
parent739031d0546da17b860b816a3acbcc560780b59c (diff)
downloadtrusty-e1e0587c1a164936bdd10ea416d8785019688f82.tar.gz
Add SPI proxy support
Bug: 118762930 Test: /data/nativetest64/trusty-ut-ctrl/trusty-ut-ctrl \ -D /dev/trusty-ipc-dev0 com.android.trusty.swspi.test Change-Id: I47e406430532abe57307e0cc0d55a0a01ad0ab94
Diffstat (limited to 'sepolicy')
-rw-r--r--sepolicy/file_contexts2
-rw-r--r--sepolicy/spiproxyd.te3
2 files changed, 5 insertions, 0 deletions
diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts
index 22c1f88..3153bd1 100644
--- a/sepolicy/file_contexts
+++ b/sepolicy/file_contexts
@@ -1,6 +1,8 @@
/dev/trusty-ipc-dev0 u:object_r:tee_device:s0
/dev/vport3p1 u:object_r:rpmb_virt_device:s0
+/dev/vport3p2 u:object_r:spi_virt_device:s0
/vendor/bin/dhcpclient u:object_r:dhcpclient_exec:s0
+/vendor/bin/spiproxyd u:object_r:tee_exec:s0
/vendor/bin/storageproxyd u:object_r:tee_exec:s0
/data/vendor/var/run(/.*)? u:object_r:varrun_file:s0
/data/vendor/ss(/.*)? u:object_r:tee_data_file:s0
diff --git a/sepolicy/spiproxyd.te b/sepolicy/spiproxyd.te
new file mode 100644
index 0000000..af35110
--- /dev/null
+++ b/sepolicy/spiproxyd.te
@@ -0,0 +1,3 @@
+type spi_virt_device, dev_type;
+
+allow tee spi_virt_device:chr_file { open read write };