From 2f3b0f2af38eb4d71cd5164188f34d952c5bffd7 Mon Sep 17 00:00:00 2001
From: Michael Wright <michaelwr@google.com>
Date: Mon, 10 Jul 2017 22:16:15 +0100
Subject: [PATCH] Allow system_server to load input device configurations

Test: flash and use PointerLocation to observe size
Bug: 62871286
Change-Id: I5588b7b1a4d948446b0e1e9e8d5b32c9aabc1e42
---
 sepolicy/vendor/file.te          | 4 ++++
 sepolicy/vendor/file_contexts    | 4 ++++
 sepolicy/vendor/system_server.te | 4 ++++
 3 files changed, 12 insertions(+)

diff --git a/sepolicy/vendor/file.te b/sepolicy/vendor/file.te
index 66ae2e4d..a03df697 100644
--- a/sepolicy/vendor/file.te
+++ b/sepolicy/vendor/file.te
@@ -78,3 +78,7 @@ type sysfs_data, fs_type, sysfs_type;
 type sysfs_diag, fs_type, sysfs_type;
 
 type hexagon_halide_file, vendor_file_type, file_type;
+
+# input files
+type idc_file, file_type, vendor_file_type;
+type keylayout_file, file_type, vendor_file_type;
diff --git a/sepolicy/vendor/file_contexts b/sepolicy/vendor/file_contexts
index e0b16326..0690949e 100644
--- a/sepolicy/vendor/file_contexts
+++ b/sepolicy/vendor/file_contexts
@@ -241,6 +241,10 @@
 /data/vendor/ipa(/.*)?                 u:object_r:ipa_vendor_data_file:s0
 /data/vendor/sensors(/.*)?             u:object_r:sensors_vendor_data_file:s0
 
+# input files
+/vendor/usr/idc(/.*)?                  u:object_r:idc_file:s0
+/vendor/usr/keylayout(/.*)?            u:object_r:keylayout_file:s0
+
 # /
 /tombstones             u:object_r:rootfs:s0
 /dsp                    u:object_r:rootfs:s0
diff --git a/sepolicy/vendor/system_server.te b/sepolicy/vendor/system_server.te
index c9bc2e48..719d2a1f 100644
--- a/sepolicy/vendor/system_server.te
+++ b/sepolicy/vendor/system_server.te
@@ -10,6 +10,10 @@ allow system_server location_data_file:dir create_dir_perms;
 allow system_server location_data_file:file create_file_perms;
 allow system_server wlan_device:chr_file rw_file_perms;
 
+# input files
+r_dir_file(system_server, idc_file)
+r_dir_file(system_server, keylayout_file)
+
 # TODO(b/30675296): Remove following dontaudit's upon resolution of this bug
 # The timerslack_ns denials spam the system really horribly
 dontaudit system_server audioserver:file write;