From 475954dad579f75e8cf558c966ad1f2c5a444f6d Mon Sep 17 00:00:00 2001 From: Andrew Scull <ascull@google.com> Date: Wed, 31 May 2017 14:37:33 +0100 Subject: [PATCH] Add missing sepolicies for OemLock HAL. Bug: 38232801 Test: Build Change-Id: Iccc16430e7502bb317f95bb2a5e2f021d8239a00 --- private/hwservice_contexts | 1 + public/hal_oemlock.te | 5 ++++- public/hwservice.te | 1 + 3 files changed, 6 insertions(+), 1 deletion(-) diff --git a/private/hwservice_contexts b/private/hwservice_contexts index 35c95ce4c..602391a5e 100644 --- a/private/hwservice_contexts +++ b/private/hwservice_contexts @@ -26,6 +26,7 @@ android.hardware.media.omx::IOmx u:object_r:hal_o android.hardware.media.omx::IOmxStore u:object_r:hal_omx_hwservice:s0 android.hardware.memtrack::IMemtrack u:object_r:hal_memtrack_hwservice:s0 android.hardware.nfc::INfc u:object_r:hal_nfc_hwservice:s0 +android.hardware.oemlock::IOemLock u:object_r:hal_oemlock_hwservice:s0 android.hardware.power::IPower u:object_r:hal_power_hwservice:s0 android.hardware.radio.deprecated::IOemHook u:object_r:hal_telephony_hwservice:s0 android.hardware.radio::IRadio u:object_r:hal_telephony_hwservice:s0 diff --git a/public/hal_oemlock.te b/public/hal_oemlock.te index dcbb964fb..3fb5a1871 100644 --- a/public/hal_oemlock.te +++ b/public/hal_oemlock.te @@ -1,2 +1,5 @@ # HwBinder IPC from client to server -# binder_call(hal_oemlock_client, hal_oemlock_server) +binder_call(hal_oemlock_client, hal_oemlock_server) + +add_hwservice(hal_oemlock_server, hal_oemlock_hwservice) +allow hal_oemlock_client hal_oemlock_hwservice:hwservice_manager find; diff --git a/public/hwservice.te b/public/hwservice.te index ca9910547..088815594 100644 --- a/public/hwservice.te +++ b/public/hwservice.te @@ -22,6 +22,7 @@ type hal_keymaster_hwservice, hwservice_manager_type; type hal_light_hwservice, hwservice_manager_type; type hal_memtrack_hwservice, hwservice_manager_type; type hal_nfc_hwservice, hwservice_manager_type; +type hal_oemlock_hwservice, hwservice_manager_type; type hal_omx_hwservice, hwservice_manager_type; type hal_power_hwservice, hwservice_manager_type; type hal_renderscript_hwservice, hwservice_manager_type, same_process_hwservice; -- GitLab