summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorXin Li <delphij@google.com>2022-08-15 21:59:32 -0700
committerXin Li <delphij@google.com>2022-08-15 21:59:32 -0700
commit7e0417148d7197cc4b9c92e5971ae508594898cb (patch)
treea24fdd91a4802dda9f30e8a0946a149a50ec453f
parent6525e9928b3d9f95b71b122a1b3fb96fe0d34ce3 (diff)
parentdeb1493db0fc812e56fdec7c4d6162300f40a203 (diff)
downloadbramble-sepolicy-main-16k.tar.gz
Bug: 242648940 Merged-In: Ia8c24610244856490c8271433710afb57d3da157 Change-Id: I8b91de5623d1f5b89d10f42a8318c8c335835ea5
-rw-r--r--vendor/google/file_contexts3
-rw-r--r--vendor/google/hal_usb_gadget_impl.te14
-rw-r--r--vendor/google/pixelstats_vendor.te5
3 files changed, 16 insertions, 6 deletions
diff --git a/vendor/google/file_contexts b/vendor/google/file_contexts
index 2994b35..490a163 100644
--- a/vendor/google/file_contexts
+++ b/vendor/google/file_contexts
@@ -1,4 +1,5 @@
# vendor binaries
-/vendor/bin/hw/android\.hardware\.usb@1\.3-service\.bramble u:object_r:hal_usb_impl_exec:s0
+/vendor/bin/hw/android\.hardware\.usb-service\.bramble u:object_r:hal_usb_impl_exec:s0
+/vendor/bin/hw/android\.hardware\.usb\.gadget-service\.bramble u:object_r:hal_usb_gadget_impl_exec:s0
/vendor/bin/hw/android\.hardware\.vibrator-service\.bramble u:object_r:hal_vibrator_default_exec:s0
/vendor/bin/hw/android\.hardware\.dumpstate@1\.1-service\.bramble u:object_r:hal_dumpstate_impl_exec:s0
diff --git a/vendor/google/hal_usb_gadget_impl.te b/vendor/google/hal_usb_gadget_impl.te
new file mode 100644
index 0000000..ddd90c2
--- /dev/null
+++ b/vendor/google/hal_usb_gadget_impl.te
@@ -0,0 +1,14 @@
+type hal_usb_gadget_impl, domain;
+hal_server_domain(hal_usb_gadget_impl, hal_usb)
+hal_server_domain(hal_usb_gadget_impl, hal_usb_gadget)
+
+type hal_usb_gadget_impl_exec, vendor_file_type, exec_type, file_type;
+init_daemon_domain(hal_usb_gadget_impl)
+
+allow hal_usb_gadget_impl configfs:dir { create rmdir };
+allow hal_usb_gadget_impl functionfs:dir { watch watch_reads };
+set_prop(hal_usb_gadget_impl, vendor_usb_prop)
+
+allow hal_usb_gadget_impl sysfs_batteryinfo:dir r_dir_perms;
+allow hal_usb_gadget_impl sysfs_batteryinfo:file rw_file_perms;
+allow hal_usb_gadget_impl sysfs_extcon:dir search;
diff --git a/vendor/google/pixelstats_vendor.te b/vendor/google/pixelstats_vendor.te
index 7782ea7..011c148 100644
--- a/vendor/google/pixelstats_vendor.te
+++ b/vendor/google/pixelstats_vendor.te
@@ -1,8 +1,3 @@
-# pixelstats vendor
-type pixelstats_vendor, domain;
-
-type pixelstats_vendor_exec, exec_type, vendor_file_type, file_type;
-init_daemon_domain(pixelstats_vendor)
r_dir_file(pixelstats_vendor, sysfs_pixelstats)
unix_socket_connect(pixelstats_vendor, chre, chre)