61d7044c46
[Detail] New sepolicy path declared and also support legacy android. MTK-Commit-Id: 8982268bbef8f852c153428f1a5f83849953c7c2 Change-Id: Ic10f297a312ff2e89e44a0aa323ffa11bc78ff6e CR-Id: ALPS04767749 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
49 lines
1.6 KiB
Plaintext
49 lines
1.6 KiB
Plaintext
# ==============================================
|
|
# Policy File of /vendor/bin/hw/vendor.mediatek.hardware.hdmi@1.0-service Executable File
|
|
|
|
# ==============================================
|
|
# Type Declaration
|
|
# ==============================================
|
|
|
|
type mtk_hal_hdmi, domain;
|
|
type mtk_hal_hdmi_exec, exec_type, file_type, vendor_file_type;
|
|
|
|
# ==============================================
|
|
# MTK Policy Rule
|
|
# ==============================================
|
|
|
|
# Setup for domain transition
|
|
init_daemon_domain(mtk_hal_hdmi)
|
|
|
|
# Allow to use HWBinder IPC
|
|
hwbinder_use(mtk_hal_hdmi);
|
|
|
|
# Allow a set of permissions required for a domain to be a server which provides a HAL implementation over HWBinder.
|
|
hal_server_domain(mtk_hal_hdmi, hal_hdmi)
|
|
|
|
# add/find permission rule to hwservicemanager
|
|
add_hwservice(hal_hdmi_server, mtk_hal_hdmi_hwservice)
|
|
|
|
# Allow to allocate hidl memory
|
|
#hal_client_domain(mtk_hal_hdmi, hal_allocator)
|
|
|
|
# Purpose : Allow to use kernel driver
|
|
allow mtk_hal_hdmi graphics_device:chr_file rw_file_perms;
|
|
|
|
# Purpose : Allow permission to get AmbientLux from hwservice_manager
|
|
allow mtk_hal_hdmi fwk_sensor_hwservice:hwservice_manager find;
|
|
|
|
#for hdmi uevent
|
|
allow mtk_hal_hdmi self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;
|
|
|
|
#============= Key Manager HIDL Service ==============
|
|
allow mtk_hal_hdmi mtk_hal_keymanage:binder call;
|
|
|
|
# Purpose : Allow hdmi to call vendor.mediatek.hardware.keymanage@1.0-service.
|
|
hal_client_domain(mtk_hal_hdmi, hal_keymaster)
|
|
|
|
allow mtk_hal_hdmi mtk_hal_keymanage_hwservice:hwservice_manager find;
|
|
|
|
# Purpose : Allow permission to set hdmi property
|
|
set_prop(mtk_hal_hdmi, mtk_hdmi_prop);
|