sdm710-common: sepolicy: Properly label slmadapter service and allow cnd to find it

Resolves:
E SELinux : avc:  denied  { find } for interface=vendor.qti.hardware.slmadapter::ISlmAdapter sid=u:r:cnd:s0 pid=975 scontext=u:r:cnd:s0 tcontext=u:object_r:default_android_hwservice:s0 tclass=hwservice_manager permissive=0

Signed-off-by: Ivan Vecera <ivan@cera.cz>
Change-Id: I5b27eee6a1f9a622962c7364b2bdabe92cf37254
This commit is contained in:
Ivan Vecera
2022-06-24 14:54:07 +02:00
committed by Sebastiano Barezzi
parent f028fbb5f2
commit f80cbb2df8
3 changed files with 5 additions and 0 deletions

1
sepolicy/vendor/cnd.te vendored Normal file
View File

@@ -0,0 +1 @@
allow cnd vendor_hal_slmadapter_hwservice:hwservice_manager find;

View File

@@ -1 +1,2 @@
type hal_mlipay_hwservice, hwservice_manager_type;
type vendor_hal_slmadapter_hwservice, hwservice_manager_type, protected_hwservice;

View File

@@ -1,3 +1,6 @@
# CND
vendor.qti.hardware.slmadapter::ISlmAdapter u:object_r:vendor_hal_slmadapter_hwservice:s0
# Fingerprint
com.fingerprints.extension::IFingerprintEngineering u:object_r:hal_fingerprint_hwservice:s0
com.fingerprints.extension::IFingerprintSensorTest u:object_r:hal_fingerprint_hwservice:s0