sdm710-common: Import full CACert stack

* Used by xtra-daemon
* Nothing uses 32-bit libjnihelper.so which belongs to CACert stack, remove it
* Fix the denials while we're at it

Test:
1. Download and open "GPS Test" app
2. Perform Menu > AGPS > Clear and update
3. Confirm there's no error about getting cacert service on logcat

Change-Id: Iace09f6d7a05e0a2ae8ef8048a19a391f537237e
This commit is contained in:
me-cafebabe
2023-03-11 04:31:16 +08:00
committed by Yumi Yukimura
parent 8214e36071
commit 01639ef896
3 changed files with 8 additions and 3 deletions

1
sepolicy/vendor/location.te vendored Normal file
View File

@@ -0,0 +1 @@
allow location hal_cacert_hwservice:hwservice_manager find;

View File

@@ -0,0 +1 @@
allow qtidataservices_app qtidataservices_app:socket { create read write }; # { ioctl } hits neverallow