diff options
Diffstat (limited to 'sepolicy/vendor/hal_fingerprint_default.te')
| -rw-r--r-- | sepolicy/vendor/hal_fingerprint_default.te | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/sepolicy/vendor/hal_fingerprint_default.te b/sepolicy/vendor/hal_fingerprint_default.te new file mode 100644 index 0000000..55c920f --- /dev/null +++ b/sepolicy/vendor/hal_fingerprint_default.te @@ -0,0 +1,37 @@ +# Binder +allow hal_fingerprint_default vendor_hal_perf_default:binder call; +allow hal_fingerprint_default vendor_hal_perf_hwservice:hwservice_manager find; + +# Props +set_prop(hal_fingerprint_default, vendor_fp_prop) +get_prop(system_server, vendor_fp_prop); + +# Sysfs +allow hal_fingerprint_default { + sysfs_rtc + vendor_sysfs_fingerprint + vendor_sysfs_spss +}: file rw_file_perms; + +allow hal_fingerprint_default { + input_device + sysfs_rtc + vendor_sysfs_fingerprint + vendor_sysfs_spss +}: dir r_dir_perms; + +# Dev nodes +allow hal_fingerprint_default { + input_device + tee_device + uhid_device + vendor_fingerprint_device +}: chr_file rw_file_perms; + +# Data +allow hal_fingerprint_default vendor_fingerprint_data_file:dir rw_dir_perms; +allow hal_fingerprint_default vendor_fingerprint_data_file:file create_file_perms; + +allow hal_fingerprint_default self:netlink_socket create_socket_perms_no_ioctl; + +r_dir_file(hal_fingerprint_default, firmware_file) |