diff --git a/non_plat/device.te b/non_plat/device.te index ef1cd6a..53ce03c 100644 --- a/non_plat/device.te +++ b/non_plat/device.te @@ -232,6 +232,7 @@ type gyroscope_device, dev_type; type barometer_device,dev_type; type humidity_device,dev_type; type biometric_device,dev_type; +type sensorlist_device,dev_type; ########################## # Sensor Devices Start # diff --git a/non_plat/file_contexts b/non_plat/file_contexts index e0f45d4..26bb7aa 100644 --- a/non_plat/file_contexts +++ b/non_plat/file_contexts @@ -346,6 +346,7 @@ /dev/hwmsensor(/.*)? u:object_r:hwmsensor_device:s0 /dev/msensor(/.*)? u:object_r:msensor_device:s0 /dev/biometric(/.*)? u:object_r:biometric_device:s0 +/dev/sensorlist(/.*)? u:object_r:sensorlist_device:s0 ########################## # Sensor Devices Start # diff --git a/non_plat/mtk_hal_sensors.te b/non_plat/mtk_hal_sensors.te index 52a6c8c..1670d70 100644 --- a/non_plat/mtk_hal_sensors.te +++ b/non_plat/mtk_hal_sensors.te @@ -11,6 +11,17 @@ hwbinder_use(mtk_hal_sensors) # call into system_server process (callbacks) binder_call(mtk_hal_sensors, system_server) +# graphics allocator +allow mtk_hal_sensors hal_graphics_allocator_default:fd use; + +# gpu device +allow mtk_hal_sensors gpu_device:dir create_dir_perms; +allow mtk_hal_sensors gpu_device:chr_file rw_file_perms; +allow mtk_hal_sensors dri_device:chr_file rw_file_perms; + +# ion device +allow mtk_hal_sensors ion_device:dir create_dir_perms; +allow mtk_hal_sensors ion_device:chr_file rw_file_perms; # system file allow mtk_hal_sensors system_file:dir read; allow mtk_hal_sensors system_file:dir open; @@ -29,6 +40,7 @@ hal_server_domain(mtk_hal_sensors, hal_sensors); #allow mtk_hal_sensors hidl_base_hwservice:hwservice_manager add; # Access sensor bio devices +allow mtk_hal_sensors sensorlist_device:chr_file rw_file_perms; allow mtk_hal_sensors m_acc_misc_device:chr_file rw_file_perms; allow mtk_hal_sensors m_als_misc_device:chr_file rw_file_perms; allow mtk_hal_sensors m_ps_misc_device:chr_file rw_file_perms;