Skip to content
Snippets Groups Projects
Commit 12e960e6 authored by Janis Danisevskis's avatar Janis Danisevskis
Browse files

Fix sepolicy for Gatekeeper HAL

This patch fixes Gatekeeper HAL rules.

Bug: 34260418
Test: Device boots with gatekeeper_hal using hwbinder and
      gatekeeperd does not fall back to software.
Change-Id: I6aaacb08faaa7a90506ab569425dc525334c8171
parent 11ce09bc
No related branches found
No related tags found
No related merge requests found
...@@ -15,7 +15,6 @@ allow gatekeeperd system_file:dir r_dir_perms; ...@@ -15,7 +15,6 @@ allow gatekeeperd system_file:dir r_dir_perms;
### Rules needed when Gatekeeper HAL runs outside of gatekeeperd process. ### Rules needed when Gatekeeper HAL runs outside of gatekeeperd process.
### These rules should eventually be granted only when needed. ### These rules should eventually be granted only when needed.
hwbinder_use(gatekeeperd)
hal_client_domain(gatekeeperd, hal_gatekeeper) hal_client_domain(gatekeeperd, hal_gatekeeper)
### ###
......
# call into gatekeeperd process (callbacks) binder_call(hal_gatekeeper_client, hal_gatekeeper_server)
# TODO: This rules is unlikely to be needed because Gatekeeper HIDL
# says there are no callbacks
binder_call(hal_gatekeeper, gatekeeperd)
# TEE access. # TEE access.
allow hal_gatekeeper tee_device:chr_file rw_file_perms; allow hal_gatekeeper tee_device:chr_file rw_file_perms;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment