Group all HAL impls using haldomain attribute am: f41d89eb am: 06d17805

am: bda2e5c7

Change-Id: I9dafddfa3edc7301d8b68d7bf7aa20e59ff70e08

private/haldomain.te

+###
+### Rules for all HAL implementations
+###

public/attributes

@@ -114,6 +114,9 @@ attribute boot_control_hal;
 # recovery for A/B devices.
 attribute update_engine_common;
 
+# All domains used for HAL implementations
+attribute haldomain;
+
 # HALs
 attribute hal_audio;
 attribute hal_bluetooth;

public/hal_allocator.te

 # allocator subsystem
-type hal_allocator, domain;
+type hal_allocator, domain, haldomain;
 type hal_allocator_exec, exec_type, file_type;
 
 # hwbinder access

public/hal_boot.te

 # boot_control subsystem
-type hal_boot, domain, boot_control_hal;
+type hal_boot, domain, boot_control_hal, haldomain;
 type hal_boot_exec, exec_type, file_type;
 
 # hwbinder access

public/te_macros

@@ -115,6 +115,20 @@ define(`bluetooth_domain', `
 typeattribute $1 bluetoothdomain;
 ')
 
+#####################################
+# hal_impl_domain(domain, hal_type_attr)
+# Allow a base set of permissions required for a domain to host a
+# HAL implementation of the specified HAL type.
+#
+# For example, default implementation of Foo HAL:
+#   type hal_foo_default, domain;
+#   hal_impl_domain(hal_foo_default, hal_foo)
+#
+define(`hal_impl_domain', `
+typeattribute $1 haldomain;
+typeattribute $1 $2;
+')
+
 #####################################
 # unix_socket_connect(clientdomain, socket, serverdomain)
 # Allow a local socket connection from clientdomain via