Android Q and R have different policy in basic. We sync it from Q policy and fix R neverallow rule MTK-Commit-Id: 67144e1e0efe28d30381b1f3a98728c1a87e396e Change-Id: Id7c92fa79976951c86d1286262f684e8f747427b CR-Id: ALPS04793867 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
24 lines
781 B
Plaintext
24 lines
781 B
Plaintext
# ==============================================================================
|
|
# Type Declaration
|
|
# ==============================================================================
|
|
type mtk_hal_light, domain;
|
|
type mtk_hal_light_exec, exec_type, file_type, vendor_file_type;
|
|
|
|
# hwbinder access
|
|
init_daemon_domain(mtk_hal_light)
|
|
hwbinder_use(mtk_hal_light)
|
|
|
|
# call into system_server process (callbacks)
|
|
binder_call(mtk_hal_light, system_server)
|
|
|
|
# system file
|
|
allow mtk_hal_light system_file:dir read;
|
|
allow mtk_hal_light system_file:dir open;
|
|
|
|
allow mtk_hal_light sysfs_leds:lnk_file read;
|
|
allow mtk_hal_light sysfs_leds:file rw_file_perms;
|
|
allow mtk_hal_light sysfs_leds:dir r_dir_perms;
|
|
|
|
get_prop(mtk_hal_light, hwservicemanager_prop)
|
|
hal_server_domain(mtk_hal_light,hal_light);
|