diff --git a/sepolicy/vendor/attributes b/sepolicy/vendor/attributes new file mode 100644 index 0000000..e74e6f2 --- /dev/null +++ b/sepolicy/vendor/attributes @@ -0,0 +1,4 @@ +# Dolby +attribute hal_dms; +attribute hal_dms_client; +attribute hal_dms_server; diff --git a/sepolicy/vendor/file_contexts b/sepolicy/vendor/file_contexts index f85c25d..3c4f065 100644 --- a/sepolicy/vendor/file_contexts +++ b/sepolicy/vendor/file_contexts @@ -27,6 +27,12 @@ /sys/devices/platform/soc/soc:qcom,dsi-display/hbm u:object_r:sysfs_hbm:s0 /sys/devices/platform/soc/soc:qcom,dsi-display/doze_mode u:object_r:sysfs_doze:s0 +# Dolby +/data/vendor/dolby(/.*)? u:object_r:vendor_data_file:s0 +/(odm|vendor/odm)/bin/hw/vendor\.dolby_v3_6\.hardware\.dms360@2\.0-service u:object_r:hal_dms_default_exec:s0 +/(odm|vendor/odm)/bin/hw/vendor\.dolby_sp\.hardware\.dmssp@2\.0-service u:object_r:hal_dms_default_exec:s0 +/(vendor|odm)/bin/hw/vendor\.dolby_sp\.media\.c2@1\.0-service u:object_r:mediacodec_exec:s0 + # Fingerprint /dev/fortsense_fp u:object_r:fingerprint_device:s0 /dev/goodix_fp u:object_r:fingerprint_device:s0 diff --git a/sepolicy/vendor/hal_dms.te b/sepolicy/vendor/hal_dms.te new file mode 100644 index 0000000..e36387d --- /dev/null +++ b/sepolicy/vendor/hal_dms.te @@ -0,0 +1,20 @@ +type hal_dms_hwservice, hwservice_manager_type, protected_hwservice; + +type hal_dms_default, domain; +hal_server_domain(hal_dms_default, hal_dms) + +type hal_dms_default_exec, exec_type, vendor_file_type, file_type; +init_daemon_domain(hal_dms_default) + +hal_attribute_hwservice(hal_dms, hal_dms_hwservice) + +binder_call(hal_dms_client, hal_dms_server) +binder_call(hal_dms_server, hal_dms_client) + +hal_client_domain(hal_audio_default, hal_dms) +hal_client_domain(mediacodec, hal_dms) + +allow hal_dms_default vendor_data_file:dir rw_dir_perms; +allow hal_dms_default vendor_data_file:file create_file_perms; + +set_prop(hal_dms_default, vendor_audio_prop) diff --git a/sepolicy/vendor/hwservice_contexts b/sepolicy/vendor/hwservice_contexts index 8ade151..39cb1d7 100644 --- a/sepolicy/vendor/hwservice_contexts +++ b/sepolicy/vendor/hwservice_contexts @@ -1,4 +1,11 @@ -vendor.goodix.hardware.biometrics.fingerprint::IGoodixFingerprintDaemon u:object_r:hal_fingerprint_hwservice_xiaomi:s0 -vendor.sw.swfingerprint::ISwfingerprint u:object_r:hal_swfingerprint_hwservice:s0 -vendor.xiaomi.hardware.fingerprintextension::IXiaomiFingerprint u:object_r:hal_fingerprint_hwservice_xiaomi:s0 -vendor.xiaomi.hardware.motor::IMotor u:object_r:hal_motor_hwservice_xiaomi:s0 +# Dolby +vendor.dolby_v3_6.hardware.dms360::IDms u:object_r:hal_dms_hwservice:s0 +vendor.dolby_sp.hardware.dmssp::IDms u:object_r:hal_dms_hwservice:s0 + +# Fingerprint +vendor.goodix.hardware.biometrics.fingerprint::IGoodixFingerprintDaemon u:object_r:hal_fingerprint_hwservice_xiaomi:s0 +vendor.sw.swfingerprint::ISwfingerprint u:object_r:hal_swfingerprint_hwservice:s0 +vendor.xiaomi.hardware.fingerprintextension::IXiaomiFingerprint u:object_r:hal_fingerprint_hwservice_xiaomi:s0 + +# Motor +vendor.xiaomi.hardware.motor::IMotor u:object_r:hal_motor_hwservice_xiaomi:s0