Juju Sung 212d0f50ad [ALPS04793867] selinux: policy sync
Android Q and R have different policy in basic.
We sync it from Q policy and fix R neverallow rule

MTK-Commit-Id: 67144e1e0efe28d30381b1f3a98728c1a87e396e

Change-Id: Id7c92fa79976951c86d1286262f684e8f747427b
CR-Id: ALPS04793867
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 10:20:50 +08:00

24 lines
781 B
Plaintext

# ==============================================================================
# Type Declaration
# ==============================================================================
type mtk_hal_light, domain;
type mtk_hal_light_exec, exec_type, file_type, vendor_file_type;
# hwbinder access
init_daemon_domain(mtk_hal_light)
hwbinder_use(mtk_hal_light)
# call into system_server process (callbacks)
binder_call(mtk_hal_light, system_server)
# system file
allow mtk_hal_light system_file:dir read;
allow mtk_hal_light system_file:dir open;
allow mtk_hal_light sysfs_leds:lnk_file read;
allow mtk_hal_light sysfs_leds:file rw_file_perms;
allow mtk_hal_light sysfs_leds:dir r_dir_perms;
get_prop(mtk_hal_light, hwservicemanager_prop)
hal_server_domain(mtk_hal_light,hal_light);