From fddd904180c20e0f880a608d87759037ecf16390 Mon Sep 17 00:00:00 2001 From: Isaac Chen Date: Wed, 7 Dec 2022 10:30:33 +0100 Subject: [PATCH] rosemary: sepolicy: Address IR denials Signed-off-by: Isaac Chen Change-Id: I8c7ae4594af864f36726b1e0956d2be3dfa4d2c5 --- sepolicy/vendor/device.te | 1 + sepolicy/vendor/file_contexts | 3 +++ sepolicy/vendor/hal_ir_default.te | 1 + 3 files changed, 5 insertions(+) create mode 100644 sepolicy/vendor/device.te create mode 100644 sepolicy/vendor/hal_ir_default.te diff --git a/sepolicy/vendor/device.te b/sepolicy/vendor/device.te new file mode 100644 index 0000000..691dc41 --- /dev/null +++ b/sepolicy/vendor/device.te @@ -0,0 +1 @@ +type spidev_device, dev_type; diff --git a/sepolicy/vendor/file_contexts b/sepolicy/vendor/file_contexts index 4f6dc79..1e7acce 100644 --- a/sepolicy/vendor/file_contexts +++ b/sepolicy/vendor/file_contexts @@ -17,6 +17,9 @@ /data/gf_data(/.*)? u:object_r:vendor_fingerprint_data_file:s0 /vendor/bin/hw/android\.hardware\.biometrics\.fingerprint@2.3-service\.xiaomi u:object_r:hal_fingerprint_default_exec:s0 +# IR +/dev/spidev3.0 u:object_r:spidev_device:s0 + # Lights /(vendor|system/vendor)/bin/hw/android\.hardware\.light-service\.rosemary u:object_r:hal_light_default_exec:s0 diff --git a/sepolicy/vendor/hal_ir_default.te b/sepolicy/vendor/hal_ir_default.te new file mode 100644 index 0000000..2f9f2b6 --- /dev/null +++ b/sepolicy/vendor/hal_ir_default.te @@ -0,0 +1 @@ +allow hal_ir_default spidev_device:chr_file rw_file_perms;