From c236e4ee06f912c8c06f60dfb628b27eb4bdda05 Mon Sep 17 00:00:00 2001 From: Marc Bourgoin Date: Thu, 30 May 2024 20:34:41 -0600 Subject: [PATCH] sm7325-common: Address some sepolicy denials from xpeng Change-Id: I6e6c8f774f800628f52dde1b081956f8d17f30bd --- sepolicy/vendor/hal_fingerprint_default.te | 2 ++ sepolicy/vendor/rild.te | 2 ++ 2 files changed, 4 insertions(+) diff --git a/sepolicy/vendor/hal_fingerprint_default.te b/sepolicy/vendor/hal_fingerprint_default.te index 44e0946..82c3465 100644 --- a/sepolicy/vendor/hal_fingerprint_default.te +++ b/sepolicy/vendor/hal_fingerprint_default.te @@ -22,6 +22,8 @@ allow hal_fingerprint_default vendor_data_tzstorage_file:file create_file_perms; binder_call(hal_fingerprint_default, hal_fingerprint_default) binder_call(hal_fingerprint_default, vendor_hal_perf_default) +allow hal_fingerprint_default vendor_hal_perf_hwservice:hwservice_manager find; + # access to /data/system/users/[0-9]+/fpdata typeattribute hal_fingerprint_default data_between_core_and_vendor_violators; allow hal_fingerprint_default fingerprintd_data_file:dir { rw_dir_perms }; diff --git a/sepolicy/vendor/rild.te b/sepolicy/vendor/rild.te index f9006e9..4736463 100644 --- a/sepolicy/vendor/rild.te +++ b/sepolicy/vendor/rild.te @@ -7,3 +7,5 @@ allow rild mnt_vendor_file:dir r_dir_perms; allow rild proc_moto_boot:file r_file_perms; allow rild cutback_data_file:dir rw_dir_perms; allow rild cutback_data_file:sock_file create_file_perms; + +allow rild fwk_sensor_service:service_manager find;