summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorXin Li <delphij@google.com>2022-06-27 23:37:54 +0000
committerXin Li <delphij@google.com>2022-06-27 23:37:54 +0000
commit243dd6d18d07ae8abad0b68ce5afa728d7b5c456 (patch)
tree0fee2f848fe210bf3ba0a511f6d6150bfd45fe03
parenta6136ce8d7b9c9352cae9e25d2eb9ca34dad2dae (diff)
parenta136a7c97a2ae28c55545565a9a14609c625415b (diff)
downloadredfin-sepolicy-temp_sam_242648940.tar.gz
Merge tm-dev-plus-aosp-without-vendor@8763363temp_sam_242648940
Bug: 236760014 Merged-In: I2e359e29716af5515c60ea57b554103579ca5570 Change-Id: I3ad90a5d531e445beed7d4fa0c3148b9df2a464d
-rw-r--r--vendor/google/file_contexts3
-rw-r--r--vendor/google/hal_usb_gadget_impl.te14
-rw-r--r--vendor/google/pixelstats_vendor.te5
3 files changed, 16 insertions, 6 deletions
diff --git a/vendor/google/file_contexts b/vendor/google/file_contexts
index 97263fe..cd5a515 100644
--- a/vendor/google/file_contexts
+++ b/vendor/google/file_contexts
@@ -1,4 +1,5 @@
# vendor binaries
-/vendor/bin/hw/android\.hardware\.usb@1\.3-service\.redfin u:object_r:hal_usb_impl_exec:s0
+/vendor/bin/hw/android\.hardware\.usb-service\.redfin u:object_r:hal_usb_impl_exec:s0
+/vendor/bin/hw/android\.hardware\.usb\.gadget-service\.redfin u:object_r:hal_usb_gadget_impl_exec:s0
/vendor/bin/hw/android\.hardware\.vibrator-service\.redfin u:object_r:hal_vibrator_default_exec:s0
/vendor/bin/hw/android\.hardware\.dumpstate@1\.1-service\.redfin u:object_r:hal_dumpstate_impl_exec:s0
diff --git a/vendor/google/hal_usb_gadget_impl.te b/vendor/google/hal_usb_gadget_impl.te
new file mode 100644
index 0000000..ddd90c2
--- /dev/null
+++ b/vendor/google/hal_usb_gadget_impl.te
@@ -0,0 +1,14 @@
+type hal_usb_gadget_impl, domain;
+hal_server_domain(hal_usb_gadget_impl, hal_usb)
+hal_server_domain(hal_usb_gadget_impl, hal_usb_gadget)
+
+type hal_usb_gadget_impl_exec, vendor_file_type, exec_type, file_type;
+init_daemon_domain(hal_usb_gadget_impl)
+
+allow hal_usb_gadget_impl configfs:dir { create rmdir };
+allow hal_usb_gadget_impl functionfs:dir { watch watch_reads };
+set_prop(hal_usb_gadget_impl, vendor_usb_prop)
+
+allow hal_usb_gadget_impl sysfs_batteryinfo:dir r_dir_perms;
+allow hal_usb_gadget_impl sysfs_batteryinfo:file rw_file_perms;
+allow hal_usb_gadget_impl sysfs_extcon:dir search;
diff --git a/vendor/google/pixelstats_vendor.te b/vendor/google/pixelstats_vendor.te
index b8ae709..df2b668 100644
--- a/vendor/google/pixelstats_vendor.te
+++ b/vendor/google/pixelstats_vendor.te
@@ -1,8 +1,3 @@
-# pixelstats vendor
-type pixelstats_vendor, domain;
-
-type pixelstats_vendor_exec, exec_type, vendor_file_type, file_type;
-init_daemon_domain(pixelstats_vendor)
r_dir_file(pixelstats_vendor, sysfs_pixelstats)
unix_socket_connect(pixelstats_vendor, chre, chre)