summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorandroid-build-team Robot <android-build-team-robot@google.com>2020-11-03 18:16:32 +0000
committerandroid-build-team Robot <android-build-team-robot@google.com>2020-11-03 18:16:32 +0000
commit455fa7e21ee5720aef5cbee92a12c5310ca24bc9 (patch)
tree95c8e755a00ce6b4458ea459f9637165b20ef276
parent59c60f3aff6465b5ab8b39618267b867fc98a7a0 (diff)
parent74391307d6e0dc3deabb25eea1c2192d246e4eac (diff)
downloadpixel-sepolicy-455fa7e21ee5720aef5cbee92a12c5310ca24bc9.tar.gz
Snap for 6948038 from 74391307d6e0dc3deabb25eea1c2192d246e4eac to rvc-platform-releaseandroid-platform-11.0.0_r4android-platform-11.0.0_r3
Change-Id: I9e6fef14e0f7808eaaa6f3424cf476a4e59ab7fc
-rw-r--r--common/init-insmod-sh.te4
-rw-r--r--googlebattery/file_contexts1
-rw-r--r--googlebattery/hal_googlebattery.te13
-rw-r--r--googlebattery/hwservice.te1
-rw-r--r--googlebattery/hwservice_contexts1
-rw-r--r--googlebattery/platform_app.te3
-rw-r--r--googlebattery/system_app.te3
-rw-r--r--googlebattery/turbo_adapter.te3
-rw-r--r--mm/file.te1
-rw-r--r--mm/genfs_contexts1
-rw-r--r--thermal/hal_thermal_default.te2
11 files changed, 33 insertions, 0 deletions
diff --git a/common/init-insmod-sh.te b/common/init-insmod-sh.te
index de1d408..16bc87c 100644
--- a/common/init-insmod-sh.te
+++ b/common/init-insmod-sh.te
@@ -8,6 +8,10 @@ allow init-insmod-sh self:capability sys_module;
allow init-insmod-sh vendor_kernel_modules:system module_load;
allow init-insmod-sh kernel:key search;
+# modprobe needs sys_nice and setsched for driver threads
+allow init-insmod-sh self:capability sys_nice;
+allow init-insmod-sh kernel:process setsched;
+
# modprobe need proc_modules
allow init-insmod-sh proc_modules:file r_file_perms;
diff --git a/googlebattery/file_contexts b/googlebattery/file_contexts
new file mode 100644
index 0000000..f4fc712
--- /dev/null
+++ b/googlebattery/file_contexts
@@ -0,0 +1 @@
+/vendor/bin/hw/vendor\.google\.google_battery@1\.0-service-vendor u:object_r:hal_googlebattery_exec:s0
diff --git a/googlebattery/hal_googlebattery.te b/googlebattery/hal_googlebattery.te
new file mode 100644
index 0000000..6e6697b
--- /dev/null
+++ b/googlebattery/hal_googlebattery.te
@@ -0,0 +1,13 @@
+type hal_googlebattery, domain;
+type hal_googlebattery_exec, exec_type, vendor_file_type, file_type;
+
+init_daemon_domain(hal_googlebattery)
+
+r_dir_file(hal_googlebattery, sysfs_batteryinfo)
+
+allow hal_googlebattery sysfs_batteryinfo:file rw_file_perms;
+allow hal_googlebattery self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;
+
+hwbinder_use(hal_googlebattery)
+add_hwservice(hal_googlebattery, hal_googlebattery_hwservice)
+get_prop(hal_googlebattery, hwservicemanager_prop)
diff --git a/googlebattery/hwservice.te b/googlebattery/hwservice.te
new file mode 100644
index 0000000..40323ef
--- /dev/null
+++ b/googlebattery/hwservice.te
@@ -0,0 +1 @@
+type hal_googlebattery_hwservice, hwservice_manager_type;
diff --git a/googlebattery/hwservice_contexts b/googlebattery/hwservice_contexts
new file mode 100644
index 0000000..40f1526
--- /dev/null
+++ b/googlebattery/hwservice_contexts
@@ -0,0 +1 @@
+vendor.google.google_battery::IGoogleBattery u:object_r:hal_googlebattery_hwservice:s0
diff --git a/googlebattery/platform_app.te b/googlebattery/platform_app.te
new file mode 100644
index 0000000..0ee586f
--- /dev/null
+++ b/googlebattery/platform_app.te
@@ -0,0 +1,3 @@
+# allow SystemUI to find and bind Google Battery HAL
+allow platform_app hal_googlebattery_hwservice:hwservice_manager find;
+binder_call(platform_app, hal_googlebattery)
diff --git a/googlebattery/system_app.te b/googlebattery/system_app.te
new file mode 100644
index 0000000..05723bf
--- /dev/null
+++ b/googlebattery/system_app.te
@@ -0,0 +1,3 @@
+# To allow Settings to find and bind Google Battery HAL
+allow system_app hal_googlebattery_hwservice:hwservice_manager find;
+binder_call(system_app, hal_googlebattery)
diff --git a/googlebattery/turbo_adapter.te b/googlebattery/turbo_adapter.te
new file mode 100644
index 0000000..33f99cd
--- /dev/null
+++ b/googlebattery/turbo_adapter.te
@@ -0,0 +1,3 @@
+# To find and bind Google Battery HAL
+allow turbo_adapter hal_googlebattery_hwservice:hwservice_manager find;
+binder_call(turbo_adapter, hal_googlebattery)
diff --git a/mm/file.te b/mm/file.te
index ee45803..81a4050 100644
--- a/mm/file.te
+++ b/mm/file.te
@@ -1,2 +1,3 @@
type mm_logd_vendor_data_file, file_type, data_file_type;
+type sysfs_fastrpc, sysfs_type, fs_type;
diff --git a/mm/genfs_contexts b/mm/genfs_contexts
new file mode 100644
index 0000000..6546455
--- /dev/null
+++ b/mm/genfs_contexts
@@ -0,0 +1 @@
+genfscon sysfs /kernel/fastrpc/total_dma_kb u:object_r:sysfs_fastrpc:s0
diff --git a/thermal/hal_thermal_default.te b/thermal/hal_thermal_default.te
index 55073a9..846f07a 100644
--- a/thermal/hal_thermal_default.te
+++ b/thermal/hal_thermal_default.te
@@ -4,5 +4,7 @@ allow hal_thermal_default proc_stat:file r_file_perms;
allow hal_thermal_default self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;
+hal_client_domain(hal_thermal_default, hal_power);
+
# read thermal_config
get_prop(hal_thermal_default, vendor_thermal_prop)