From 07c75b1784b7ba375b763135d5ae4e27de957e51 Mon Sep 17 00:00:00 2001
From: Sandeep Patil <sspatil@google.com>
Date: Wed, 11 Jan 2017 15:57:32 -0800
Subject: [PATCH] hal_health: move system_file permissions to public/hal_health
Bug: 34231014
Test: Boot angler to ensure no additional denials are reported.
Change-Id: Ic2372d55f7072c65e7ea17036a8eb40dc531d60e
Signed-off-by: Sandeep Patil <sspatil@google.com>
---
private/hal_health_default.te | 5 -----
public/hal_health.te | 5 +++++
2 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/private/hal_health_default.te b/private/hal_health_default.te
index fb2397325..e853fb6f1 100644
--- a/private/hal_health_default.te
+++ b/private/hal_health_default.te
@@ -3,8 +3,3 @@ type hal_health_default, hal_health, domain;
type hal_health_default_exec, exec_type, file_type;
init_daemon_domain(hal_health_default)
-
-# Read access to system files for HALs in
-# /{system,vendor,odm}/lib[64]/hw/ in order
-# to be able to open the hal implementation .so files
-r_dir_file(hal_health, system_file)
diff --git a/public/hal_health.te b/public/hal_health.te
index 226409f4b..c6391b810 100644
--- a/public/hal_health.te
+++ b/public/hal_health.te
@@ -3,3 +3,8 @@ hwbinder_use(hal_health)
# call into healthd for callbacks
binder_call(hal_health, healthd)
+
+# Read access to system files for HALs in
+# /{system,vendor,odm}/lib[64]/hw/ in order
+# to be able to open the hal implementation .so files
+r_dir_file(hal_health, system_file)
--
GitLab