From 3ff7bf86cecbf18566787eecd2ce74665a266536 Mon Sep 17 00:00:00 2001
From: Michael Butler <butlermichael@google.com>
Date: Fri, 7 Dec 2018 17:24:24 -0800
Subject: [PATCH] Allow NN HAL to mmap client-provided fd by default

Currently all NN services include this, so making it a default will
reduce NN service configuration.

Change-Id: I18531e57a7069076a208aefac4a545ba6c4379b0
Fixes: 120283437
Test: mma
Test: NeuralNetworksTest_static
Test: VtsHalNeuralnetworksV1_*TargetTest
---
 public/hal_neuralnetworks.te | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/public/hal_neuralnetworks.te b/public/hal_neuralnetworks.te
index 348fdb892..21374bc8b 100644
--- a/public/hal_neuralnetworks.te
+++ b/public/hal_neuralnetworks.te
@@ -5,3 +5,9 @@ binder_call(hal_neuralnetworks_server, hal_neuralnetworks_client)
 hal_attribute_hwservice(hal_neuralnetworks, hal_neuralnetworks_hwservice)
 allow hal_neuralnetworks hidl_memory_hwservice:hwservice_manager find;
 allow hal_neuralnetworks hal_allocator:fd use;
+
+# Allow NN HAL service to use a client-provided fd residing in /data/data/.
+allow hal_neuralnetworks_server app_data_file:file { read write getattr map };
+
+# Allow NN HAL service to use a client-provided fd residing in /data/local/tmp/.
+allow hal_neuralnetworks_server shell_data_file:file { read write getattr map };
-- 
GitLab