summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorXin Li <delphij@google.com>2022-08-15 22:01:25 -0700
committerXin Li <delphij@google.com>2022-08-15 22:01:25 -0700
commit605f3172fb2f0180ca5cb92fee598146a4c0b0e7 (patch)
tree0fee2f848fe210bf3ba0a511f6d6150bfd45fe03
parenta6136ce8d7b9c9352cae9e25d2eb9ca34dad2dae (diff)
parent243dd6d18d07ae8abad0b68ce5afa728d7b5c456 (diff)
downloadredfin-sepolicy-605f3172fb2f0180ca5cb92fee598146a4c0b0e7.tar.gz
Bug: 242648940 Merged-In: I2e359e29716af5515c60ea57b554103579ca5570 Change-Id: I9c95189355453f338a6575352dc4c51ccf8e12f8
-rw-r--r--vendor/google/file_contexts3
-rw-r--r--vendor/google/hal_usb_gadget_impl.te14
-rw-r--r--vendor/google/pixelstats_vendor.te5
3 files changed, 16 insertions, 6 deletions
diff --git a/vendor/google/file_contexts b/vendor/google/file_contexts
index 97263fe..cd5a515 100644
--- a/vendor/google/file_contexts
+++ b/vendor/google/file_contexts
@@ -1,4 +1,5 @@
# vendor binaries
-/vendor/bin/hw/android\.hardware\.usb@1\.3-service\.redfin u:object_r:hal_usb_impl_exec:s0
+/vendor/bin/hw/android\.hardware\.usb-service\.redfin u:object_r:hal_usb_impl_exec:s0
+/vendor/bin/hw/android\.hardware\.usb\.gadget-service\.redfin u:object_r:hal_usb_gadget_impl_exec:s0
/vendor/bin/hw/android\.hardware\.vibrator-service\.redfin u:object_r:hal_vibrator_default_exec:s0
/vendor/bin/hw/android\.hardware\.dumpstate@1\.1-service\.redfin u:object_r:hal_dumpstate_impl_exec:s0
diff --git a/vendor/google/hal_usb_gadget_impl.te b/vendor/google/hal_usb_gadget_impl.te
new file mode 100644
index 0000000..ddd90c2
--- /dev/null
+++ b/vendor/google/hal_usb_gadget_impl.te
@@ -0,0 +1,14 @@
+type hal_usb_gadget_impl, domain;
+hal_server_domain(hal_usb_gadget_impl, hal_usb)
+hal_server_domain(hal_usb_gadget_impl, hal_usb_gadget)
+
+type hal_usb_gadget_impl_exec, vendor_file_type, exec_type, file_type;
+init_daemon_domain(hal_usb_gadget_impl)
+
+allow hal_usb_gadget_impl configfs:dir { create rmdir };
+allow hal_usb_gadget_impl functionfs:dir { watch watch_reads };
+set_prop(hal_usb_gadget_impl, vendor_usb_prop)
+
+allow hal_usb_gadget_impl sysfs_batteryinfo:dir r_dir_perms;
+allow hal_usb_gadget_impl sysfs_batteryinfo:file rw_file_perms;
+allow hal_usb_gadget_impl sysfs_extcon:dir search;
diff --git a/vendor/google/pixelstats_vendor.te b/vendor/google/pixelstats_vendor.te
index b8ae709..df2b668 100644
--- a/vendor/google/pixelstats_vendor.te
+++ b/vendor/google/pixelstats_vendor.te
@@ -1,8 +1,3 @@
-# pixelstats vendor
-type pixelstats_vendor, domain;
-
-type pixelstats_vendor_exec, exec_type, vendor_file_type, file_type;
-init_daemon_domain(pixelstats_vendor)
r_dir_file(pixelstats_vendor, sysfs_pixelstats)
unix_socket_connect(pixelstats_vendor, chre, chre)