summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSteve Pfetsch <spfetsch@google.com>2023-09-21 22:19:06 +0000
committerAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>2023-09-21 22:19:06 +0000
commit5536f04a93b6a8a86fb39b50d72c9cdaa1791708 (patch)
tree02c5a14b8e3f9e7bcf4a12311aa6ce9a5aad7773
parent6b1665276cb1ff743d8d600436ae4d8f3e640208 (diff)
parentbcb0118d1c4304bd2ad6ef74e7e3a47c9812fcb0 (diff)
downloadshusky-sepolicy-5536f04a93b6a8a86fb39b50d72c9cdaa1791708.tar.gz
Merge "DiagnosticsTool permissions for accessing touch calibration interface" into udc-qpr-dev am: 8b350cc57d am: bcb0118d1c
Original change: https://googleplex-android-review.googlesource.com/c/device/google/shusky-sepolicy/+/24813119 Change-Id: I3e98bed1eefb24a9a0a022f61b9666b0b857745a Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
-rw-r--r--husky-sepolicy.mk2
-rw-r--r--shiba-sepolicy.mk2
-rw-r--r--tracking_denials/file.te2
-rw-r--r--tracking_denials/priv_app.te4
4 files changed, 10 insertions, 0 deletions
diff --git a/husky-sepolicy.mk b/husky-sepolicy.mk
index 1a8c79b..73742a8 100644
--- a/husky-sepolicy.mk
+++ b/husky-sepolicy.mk
@@ -1,3 +1,5 @@
# sepolicy exclusively for husky.
BOARD_SEPOLICY_DIRS += device/google/shusky-sepolicy/husky
+# unresolved SELinux error log with bug tracking
+BOARD_SEPOLICY_DIRS += device/google/shusky-sepolicy/tracking_denials
diff --git a/shiba-sepolicy.mk b/shiba-sepolicy.mk
index 23f811f..114c114 100644
--- a/shiba-sepolicy.mk
+++ b/shiba-sepolicy.mk
@@ -1,3 +1,5 @@
# sepolicy exclusively for shiba.
BOARD_SEPOLICY_DIRS += device/google/shusky-sepolicy/shiba
+# unresolved SELinux error log with bug tracking
+BOARD_SEPOLICY_DIRS += device/google/shusky-sepolicy/tracking_denials
diff --git a/tracking_denials/file.te b/tracking_denials/file.te
new file mode 100644
index 0000000..e348a15
--- /dev/null
+++ b/tracking_denials/file.te
@@ -0,0 +1,2 @@
+# b/301300623
+typeattribute sysfs_touch_gti mlstrustedobject;
diff --git a/tracking_denials/priv_app.te b/tracking_denials/priv_app.te
new file mode 100644
index 0000000..6e25d2e
--- /dev/null
+++ b/tracking_denials/priv_app.te
@@ -0,0 +1,4 @@
+# b/301300623
+allow priv_app app_api_service:service_manager find;
+allow priv_app sysfs_touch_gti:file rw_file_perms;
+allow priv_app sysfs_touch_gti:file { getattr open read write };