sepolicy: move thermal HAL to thermal-engine

Move standalone Thermal HAL daemon permissions to thermal-engine

Thermal HAL for Qualcomm-based devices is now served by the vendor
daemon for thermal management: thermal-engine.

Bug: 30982366
Test: manual on walleye: audit logs
Change-Id: I95e8dde9825b99c5ad28212f4eb34b774d1759e9
This commit is contained in:
Todd Poynor
2017-08-24 00:18:16 -07:00
parent de912858f8
commit f16a701e6b
2 changed files with 5 additions and 4 deletions

View File

@@ -1,4 +0,0 @@
allow hal_thermal_default sysfs_thermal:dir { open read search };
allow hal_thermal_default sysfs_thermal:file { getattr open read };
allow hal_thermal_default sysfs_thermal:lnk_file read;
allow hal_thermal_default proc_stat:file { getattr open read };

View File

@@ -14,8 +14,13 @@ allow thermal-engine sysfs_soc:dir search;
allow thermal-engine sysfs_soc:file r_file_perms;
allow thermal-engine sysfs_thermal:dir r_dir_perms;
allow thermal-engine sysfs_thermal:file rw_file_perms;
allow thermal-engine sysfs_thermal:lnk_file read;
allow thermal-engine sysfs_rmtfs:dir search;
allow thermal-engine sysfs_rmtfs:file r_file_perms;
# to read /proc/stat
allow thermal-engine proc_stat:file { getattr open read };
# IThermal Thermal HAL
hal_server_domain(thermal-engine, hal_thermal)
allow thermal-engine thermal_device:chr_file rw_file_perms;