diff --git a/private/compat/28.0/28.0.cil b/private/compat/28.0/28.0.cil index 7906421846309d25f4bd7e01839d0b9ead0e65ba..4e653b20a0c1cc00e895037201b56d97abe6b4ff 100644 --- a/private/compat/28.0/28.0.cil +++ b/private/compat/28.0/28.0.cil @@ -2,6 +2,7 @@ (type audio_seq_device) (type audio_timer_device) (type commontime_management_service) +(type fingerprint_vendor_data_file) (type full_device) (type i2c_device) (type kmem_device) @@ -1073,7 +1074,7 @@ (typeattributeset fingerprintd_service_28_0 (fingerprintd_service)) (typeattributeset fingerprint_prop_28_0 (fingerprint_prop)) (typeattributeset fingerprint_service_28_0 (fingerprint_service)) -(typeattributeset fingerprint_vendor_data_file_28_0 (fingerprint_vendor_data_file)) +(typeattributeset fingerprint_vendor_data_file_28_0 (biometric_vendor_data_file)) (typeattributeset firstboot_prop_28_0 (firstboot_prop)) (typeattributeset font_service_28_0 (font_service)) (typeattributeset frp_block_device_28_0 (frp_block_device)) diff --git a/private/compat/28.0/28.0.ignore.cil b/private/compat/28.0/28.0.ignore.cil index 2caedda3e1db3a4b859a2461413689290456e17e..75487863261834539467db331bc9aea9ce2726ec 100644 --- a/private/compat/28.0/28.0.ignore.cil +++ b/private/compat/28.0/28.0.ignore.cil @@ -17,6 +17,7 @@ apexd_prop apexd_tmpfs biometric_service + biometric_vendor_data_file device_config_boot_count_prop device_config_reset_performed_prop face_service diff --git a/private/file_contexts b/private/file_contexts index 9ef18e2c3e3f69a51eb6d85649aa69d28ef30c89..71277458269944eeaac63f4c363b95cddccf05fb 100644 --- a/private/file_contexts +++ b/private/file_contexts @@ -484,7 +484,13 @@ /data/system/users/[0-9]+/fpdata(/.*)? u:object_r:fingerprintd_data_file:s0 # Fingerprint vendor data file -/data/vendor_de/[0-9]+/fpdata(/.*)? u:object_r:fingerprint_vendor_data_file:s0 +/data/vendor_de/[0-9]+/fpdata(/.*)? u:object_r:biometric_vendor_data_file:s0 + +# Face vendor data file +/data/vendor_de/[0-9]+/facedata(/.*)? u:object_r:biometric_vendor_data_file:s0 + +# Iris vendor data file +/data/vendor_de/[0-9]+/irisdata(/.*)? u:object_r:biometric_vendor_data_file:s0 # Bootchart data /data/bootchart(/.*)? u:object_r:bootchart_data_file:s0 diff --git a/private/vold_prepare_subdirs.te b/private/vold_prepare_subdirs.te index 0d062e991e3b15856ddd3f571f60dbfa4d26a26a..8ed8f56e77ae177735f9e08e20fb439018771af1 100644 --- a/private/vold_prepare_subdirs.te +++ b/private/vold_prepare_subdirs.te @@ -14,12 +14,12 @@ allow vold_prepare_subdirs { vendor_data_file }:dir { open read write add_name remove_name rmdir relabelfrom }; allow vold_prepare_subdirs { - fingerprint_vendor_data_file + biometric_vendor_data_file storaged_data_file vold_data_file }:dir { create_dir_perms relabelto }; allow vold_prepare_subdirs { - fingerprint_vendor_data_file + biometric_vendor_data_file storaged_data_file system_data_file vold_data_file diff --git a/public/file.te b/public/file.te index 87636d3d70a00c7b714abeea3edd78b97e7c42a4..9cdd5f4c0a9d88b92e6689b8d604147652ff3a3b 100644 --- a/public/file.te +++ b/public/file.te @@ -352,8 +352,8 @@ type backup_data_file, file_type, data_file_type, core_data_file_type, mlstruste type bluetooth_efs_file, file_type; # Type for fingerprint template file type fingerprintd_data_file, file_type, data_file_type, core_data_file_type; -# Type for _new_ fingerprint template file -type fingerprint_vendor_data_file, file_type, data_file_type; +# Type for biometric template file +type biometric_vendor_data_file, file_type, data_file_type; # Type for appfuse file. type app_fuse_file, file_type, data_file_type, core_data_file_type, mlstrustedobject; diff --git a/public/hal_fingerprint.te b/public/hal_fingerprint.te index b673e291b50ed6ac1f07d06c389554f032efbd5c..a0222e9df1a4842aaf1c737be92c0f7c307fabd2 100644 --- a/public/hal_fingerprint.te +++ b/public/hal_fingerprint.te @@ -7,8 +7,8 @@ hal_attribute_hwservice(hal_fingerprint, hal_fingerprint_hwservice) # For memory allocation allow hal_fingerprint ion_device:chr_file r_file_perms; -allow hal_fingerprint fingerprint_vendor_data_file:file { create_file_perms }; -allow hal_fingerprint fingerprint_vendor_data_file:dir rw_dir_perms; +allow hal_fingerprint biometric_vendor_data_file:file { create_file_perms }; +allow hal_fingerprint biometric_vendor_data_file:dir rw_dir_perms; r_dir_file(hal_fingerprint, cgroup) r_dir_file(hal_fingerprint, sysfs) diff --git a/public/tee.te b/public/tee.te index 0f9b32dc9d4cb095f4ea361e39a52b09d0c01b29..dffe06ff7112a801bdf8e9afc2a98ccce9c68fee 100644 --- a/public/tee.te +++ b/public/tee.te @@ -6,6 +6,6 @@ type tee, domain; # Device(s) for communicating with the TEE type tee_device, dev_type; -allow tee fingerprint_vendor_data_file:dir rw_dir_perms; -allow tee fingerprint_vendor_data_file:file create_file_perms; +allow tee biometric_vendor_data_file:dir rw_dir_perms; +allow tee biometric_vendor_data_file:file create_file_perms;