Switch Sensors HAL policy to _client/_server am: 41518bec am: 6a0ba6c5

am: 37ec9b0a

Change-Id: Iab8c116dc92313a7d987fd3c4b370da6d9483772

private/system_server.te

@@ -179,7 +179,7 @@ binder_call(system_server, hal_ir)
 binder_call(system_server, hal_light)
 binder_call(system_server, hal_memtrack)
 binder_call(system_server, hal_power)
-binder_call(system_server, hal_sensors)
+hal_client_domain(system_server, hal_sensors)
 binder_call(system_server, hal_thermal)
 binder_call(system_server, hal_usb)
 binder_call(system_server, hal_vibrator)
@@ -450,9 +450,6 @@ allow system_server cache_private_backup_file:file create_file_perms;
 allow system_server usb_device:chr_file rw_file_perms;
 allow system_server usb_device:dir r_dir_perms;
 
-# Allow system to talk to sensors
-allow system_server sensors_device:chr_file rw_file_perms;
-
 # Read from HW RNG (needed by EntropyMixer).
 allow system_server hw_random_device:chr_file r_file_perms;
 

public/attributes

@@ -160,6 +160,8 @@ attribute hal_memtrack;
 attribute hal_nfc;
 attribute hal_power;
 attribute hal_sensors;
+attribute hal_sensors_client;
+attribute hal_sensors_server;
 attribute hal_telephony;
 attribute hal_thermal;
 attribute hal_usb;

public/hal_sensors.te

+# HwBinder IPC from client to server
+binder_call(hal_sensors_client, hal_sensors_server)
+
 # Allow sensor hals to access ashmem memory allocated by apps
 allow hal_sensors { appdomain -isolated_app }:fd use;

vendor/hal_sensors_default.te

 type hal_sensors_default, domain;
-hal_impl_domain(hal_sensors_default, hal_sensors)
+hal_server_domain(hal_sensors_default, hal_sensors)
 
 type hal_sensors_default_exec, exec_type, file_type;
 init_daemon_domain(hal_sensors_default)