summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorXin Li <delphij@google.com>2019-07-01 20:59:11 +0000
committerXin Li <delphij@google.com>2019-07-01 20:59:11 +0000
commit4849ce295ffc7d2e090ca94a8dffe7d3689b65c8 (patch)
tree7e5d6490153e12fcb07779443f3345a2ebda99c8
parent719ecaf028200e86411f1ddba10328acab7d155c (diff)
parentf5d468e8b003da85b6ca36c795201902f50b9ecb (diff)
downloadvrservices-4849ce295ffc7d2e090ca94a8dffe7d3689b65c8.tar.gz
DO NOT MERGE - Merge qt-dev-plus-aosp-without-vendor (5699924) into stage-aosp-master
Bug: 134405016 Change-Id: Ia08ce670b60196f02d50dd34eae4be4f89a56a51
-rw-r--r--vrcore/sepolicy/vrcore_app.te1
-rw-r--r--vrcore/sepolicy_mtc/vrcore_app.te16
2 files changed, 17 insertions, 0 deletions
diff --git a/vrcore/sepolicy/vrcore_app.te b/vrcore/sepolicy/vrcore_app.te
index e12040a..d827641 100644
--- a/vrcore/sepolicy/vrcore_app.te
+++ b/vrcore/sepolicy/vrcore_app.te
@@ -5,6 +5,7 @@
###
type vrcore_app, domain;
+type vrcore_app_tmpfs, file_type;
app_domain(vrcore_app)
net_domain(vrcore_app)
diff --git a/vrcore/sepolicy_mtc/vrcore_app.te b/vrcore/sepolicy_mtc/vrcore_app.te
new file mode 100644
index 0000000..3dda5f2
--- /dev/null
+++ b/vrcore/sepolicy_mtc/vrcore_app.te
@@ -0,0 +1,16 @@
+###
+### MTC specific VrCore permissions
+###
+
+allow vrcore_app persist_file:dir search;
+
+# allow vrcore to access dsp
+allow vrcore_app qdsp_device:chr_file r_file_perms;
+r_dir_file(vrcore_app, adsprpcd_file)
+
+# allow vrcore to access sensor service
+allow vrcore_app fwk_sensor_hwservice:hwservice_manager find;
+allow vrcore_app sensorservice_service:service_manager find;
+
+# allow vrcore to access /persist/tango/calibration.xml
+r_dir_file(vrcore_app, tango_data_file); \ No newline at end of file