perfprofd: talk to health HAL.

Test: perfprofd tests
Bug: 110890430
Change-Id: I0f7476d76b8d35b6b48fe6b77544ca8ccc71534d

private/perfprofd.te

@@ -3,6 +3,6 @@ userdebug_or_eng(`
   init_daemon_domain(perfprofd)
 ')
 
-# Only servicemanager, statsd, su and systemserver can communicate.
-neverallow { domain userdebug_or_eng(`-statsd -system_server') } perfprofd:binder call;
-neverallow perfprofd { domain userdebug_or_eng(`-servicemanager -statsd -su -system_server') }:binder call;
+# Only servicemanager, statsd, su, systemserver, hwservicemanager, health HAL can communicate.
+neverallow { domain userdebug_or_eng(`-statsd -system_server -hal_health_server -hwservicemanager') } perfprofd:binder call;
+neverallow perfprofd { domain userdebug_or_eng(`-servicemanager -statsd -su -system_server -hal_health_server -hwservicemanager') }:binder call;

public/domain.te

@@ -1421,7 +1421,5 @@ full_treble_only(`
     -charger
     # TODO(b/110891300): remove this exception
     -incidentd
-    # TODO(b/110890430): remove this exception
-    -perfprofd
   } sysfs_batteryinfo:file { open read };
 ')

public/perfprofd.te

@@ -39,8 +39,8 @@ userdebug_or_eng(`
   # perfprofd looks at thermals.
   allow perfprofd sysfs_thermal:dir r_dir_perms;
 
-  # perfprofd checks power_supply.
-  r_dir_file(perfprofd, sysfs_batteryinfo)
+  # perfprofd gets charging status.
+  hal_client_domain(perfprofd, hal_health)
 
   # simpleperf reads kernel notes.
   allow perfprofd sysfs_kernel_notes:file r_file_perms;