hongxu.zhao f57f7914f3 [ALPS04761129] sensor: high risk sepolicy of mtk_hal_sensors
give /sys/class/sensor folder perms for mtk_hal_sensors

MTK-Commit-Id: 7d2c08aad389eb68e423d9fa75d5c4f0d514577c

Change-Id: I63c5300a31b523de5d4c22ac53e5e03ba8cdd048
CR-Id: ALPS04761129
Feature: Sensor Hub
2020-01-18 10:19:22 +08:00

70 lines
2.6 KiB
Plaintext

# ==============================================================================
# Type Declaration
# ==============================================================================
type mtk_hal_sensors, domain;
type mtk_hal_sensors_exec, exec_type, file_type, vendor_file_type;
# hwbinder access
init_daemon_domain(mtk_hal_sensors)
hwbinder_use(mtk_hal_sensors)
# call into system_server process (callbacks)
binder_call(mtk_hal_sensors, system_server)
# graphics allocator
allow mtk_hal_sensors hal_graphics_allocator_default:fd use;
# gpu device
allow mtk_hal_sensors gpu_device:dir create_dir_perms;
allow mtk_hal_sensors gpu_device:chr_file rw_file_perms;
allow mtk_hal_sensors dri_device:chr_file rw_file_perms;
# ion device
allow mtk_hal_sensors ion_device:dir create_dir_perms;
allow mtk_hal_sensors ion_device:chr_file rw_file_perms;
# system file
allow mtk_hal_sensors system_file:dir read;
allow mtk_hal_sensors system_file:dir open;
# sensors input rw access
allow mtk_hal_sensors sysfs_sensor:dir r_dir_perms;
allow mtk_hal_sensors sysfs_sensor:file rw_file_perms;
# hal sensor for chr_file
allow mtk_hal_sensors hwmsensor_device:chr_file r_file_perms;
get_prop(mtk_hal_sensors, hwservicemanager_prop)
#hwservicemanager
hal_server_domain(mtk_hal_sensors, hal_sensors);
# Access sensor bio devices
allow mtk_hal_sensors sensorlist_device:chr_file rw_file_perms;
allow mtk_hal_sensors m_acc_misc_device:chr_file rw_file_perms;
allow mtk_hal_sensors m_als_misc_device:chr_file rw_file_perms;
allow mtk_hal_sensors m_ps_misc_device:chr_file rw_file_perms;
allow mtk_hal_sensors m_mag_misc_device:chr_file rw_file_perms;
allow mtk_hal_sensors m_gyro_misc_device:chr_file rw_file_perms;
allow mtk_hal_sensors m_baro_misc_device:chr_file rw_file_perms;
allow mtk_hal_sensors m_hmdy_misc_device:chr_file rw_file_perms;
allow mtk_hal_sensors m_act_misc_device:chr_file rw_file_perms;
allow mtk_hal_sensors m_pedo_misc_device:chr_file rw_file_perms;
allow mtk_hal_sensors m_situ_misc_device:chr_file rw_file_perms;
allow mtk_hal_sensors m_step_c_misc_device:chr_file rw_file_perms;
allow mtk_hal_sensors m_fusion_misc_device:chr_file rw_file_perms;
allow mtk_hal_sensors m_bio_misc_device:chr_file rw_file_perms;
# Access mtk sensor setting and calibration node.
# for data
allow mtk_hal_sensors sensor_data_file:file create_file_perms;
allow mtk_hal_sensors sensor_data_file:dir create_dir_perms;
# for nvcfg
allow mtk_hal_sensors nvcfg_file:file create_file_perms;
allow mtk_hal_sensors nvcfg_file:dir create_dir_perms;
# Date : WK18.21
# Operation: P migration
# Purpose: Allow to search /mnt/vendor/nvdata for fstab when using NVM_Init()
allow mtk_hal_sensors mnt_vendor_file:dir search;