summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorTomasz Wasilczyk2017-08-29 09:03:01 -0500
committerAndroid (Google) Code Review2017-08-29 09:03:01 -0500
commit4f6e5b987dc1844b798db763a19ed89d1a42bf70 (patch)
treea0c4f5488d5cffe3566ae93994288ac74a99ef28
parente14d6a98ee28e7a3616db2bb38223e7136e5d54f (diff)
parent567b947d85a353af56799c4e48583adfa7ff4e0d (diff)
downloadsystem-sepolicy-4f6e5b987dc1844b798db763a19ed89d1a42bf70.tar.gz
system-sepolicy-4f6e5b987dc1844b798db763a19ed89d1a42bf70.tar.xz
system-sepolicy-4f6e5b987dc1844b798db763a19ed89d1a42bf70.zip
Merge "Move Broadcast Radio HAL to a separate binary." into oc-mr1-dev
-rw-r--r--private/compat/26.0/26.0.ignore.cil1
-rw-r--r--private/hwservice_contexts2
-rw-r--r--private/system_server.te1
-rw-r--r--public/attributes6
-rw-r--r--public/hal_broadcastradio.te4
-rw-r--r--public/hwservice.te1
-rw-r--r--vendor/file_contexts1
-rw-r--r--vendor/hal_broadcastradio_default.te5
8 files changed, 20 insertions, 1 deletions
diff --git a/private/compat/26.0/26.0.ignore.cil b/private/compat/26.0/26.0.ignore.cil
index a04e0262..a517b960 100644
--- a/private/compat/26.0/26.0.ignore.cil
+++ b/private/compat/26.0/26.0.ignore.cil
@@ -7,6 +7,7 @@
7 broadcastradio_service 7 broadcastradio_service
8 e2fs 8 e2fs
9 e2fs_exec 9 e2fs_exec
10 hal_broadcastradio_hwservice
10 hal_cas_hwservice 11 hal_cas_hwservice
11 hal_neuralnetworks_hwservice 12 hal_neuralnetworks_hwservice
12 hal_tetheroffload_hwservice 13 hal_tetheroffload_hwservice
diff --git a/private/hwservice_contexts b/private/hwservice_contexts
index 107e4839..e3044955 100644
--- a/private/hwservice_contexts
+++ b/private/hwservice_contexts
@@ -6,7 +6,7 @@ android.hardware.audio::IDevicesFactory u:object_r:hal_a
6android.hardware.biometrics.fingerprint::IBiometricsFingerprint u:object_r:hal_fingerprint_hwservice:s0 6android.hardware.biometrics.fingerprint::IBiometricsFingerprint u:object_r:hal_fingerprint_hwservice:s0
7android.hardware.bluetooth::IBluetoothHci u:object_r:hal_bluetooth_hwservice:s0 7android.hardware.bluetooth::IBluetoothHci u:object_r:hal_bluetooth_hwservice:s0
8android.hardware.boot::IBootControl u:object_r:hal_bootctl_hwservice:s0 8android.hardware.boot::IBootControl u:object_r:hal_bootctl_hwservice:s0
9android.hardware.broadcastradio::IBroadcastRadioFactory u:object_r:hal_audio_hwservice:s0 9android.hardware.broadcastradio::IBroadcastRadioFactory u:object_r:hal_broadcastradio_hwservice:s0
10android.hardware.camera.provider::ICameraProvider u:object_r:hal_camera_hwservice:s0 10android.hardware.camera.provider::ICameraProvider u:object_r:hal_camera_hwservice:s0
11android.hardware.configstore::ISurfaceFlingerConfigs u:object_r:hal_configstore_ISurfaceFlingerConfigs:s0 11android.hardware.configstore::ISurfaceFlingerConfigs u:object_r:hal_configstore_ISurfaceFlingerConfigs:s0
12android.hardware.contexthub::IContexthub u:object_r:hal_contexthub_hwservice:s0 12android.hardware.contexthub::IContexthub u:object_r:hal_contexthub_hwservice:s0
diff --git a/private/system_server.te b/private/system_server.te
index e61b3035..a46272ad 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -186,6 +186,7 @@ binder_service(system_server)
186 186
187# Use HALs 187# Use HALs
188hal_client_domain(system_server, hal_allocator) 188hal_client_domain(system_server, hal_allocator)
189hal_client_domain(system_server, hal_broadcastradio)
189hal_client_domain(system_server, hal_configstore) 190hal_client_domain(system_server, hal_configstore)
190hal_client_domain(system_server, hal_contexthub) 191hal_client_domain(system_server, hal_contexthub)
191hal_client_domain(system_server, hal_fingerprint) 192hal_client_domain(system_server, hal_fingerprint)
diff --git a/public/attributes b/public/attributes
index 386b21a5..d384efd8 100644
--- a/public/attributes
+++ b/public/attributes
@@ -214,6 +214,12 @@ attribute hal_bootctl_client;
214expandattribute hal_bootctl_client true; 214expandattribute hal_bootctl_client true;
215attribute hal_bootctl_server; 215attribute hal_bootctl_server;
216expandattribute hal_bootctl_server false; 216expandattribute hal_bootctl_server false;
217attribute hal_broadcastradio;
218expandattribute hal_broadcastradio true;
219attribute hal_broadcastradio_client;
220expandattribute hal_broadcastradio_client true;
221attribute hal_broadcastradio_server;
222expandattribute hal_broadcastradio_server false;
217attribute hal_camera; 223attribute hal_camera;
218expandattribute hal_camera false; 224expandattribute hal_camera false;
219attribute hal_camera_client; 225attribute hal_camera_client;
diff --git a/public/hal_broadcastradio.te b/public/hal_broadcastradio.te
new file mode 100644
index 00000000..24d4908e
--- /dev/null
+++ b/public/hal_broadcastradio.te
@@ -0,0 +1,4 @@
1binder_call(hal_broadcastradio_client, hal_broadcastradio_server)
2
3add_hwservice(hal_broadcastradio_server, hal_broadcastradio_hwservice)
4allow hal_broadcastradio_client hal_broadcastradio_hwservice:hwservice_manager find;
diff --git a/public/hwservice.te b/public/hwservice.te
index 1b11678d..97b9b8d1 100644
--- a/public/hwservice.te
+++ b/public/hwservice.te
@@ -5,6 +5,7 @@ type fwk_sensor_hwservice, hwservice_manager_type, coredomain_hwservice;
5type hal_audio_hwservice, hwservice_manager_type; 5type hal_audio_hwservice, hwservice_manager_type;
6type hal_bluetooth_hwservice, hwservice_manager_type; 6type hal_bluetooth_hwservice, hwservice_manager_type;
7type hal_bootctl_hwservice, hwservice_manager_type; 7type hal_bootctl_hwservice, hwservice_manager_type;
8type hal_broadcastradio_hwservice, hwservice_manager_type;
8type hal_camera_hwservice, hwservice_manager_type; 9type hal_camera_hwservice, hwservice_manager_type;
9type hal_configstore_ISurfaceFlingerConfigs, hwservice_manager_type; 10type hal_configstore_ISurfaceFlingerConfigs, hwservice_manager_type;
10type hal_contexthub_hwservice, hwservice_manager_type; 11type hal_contexthub_hwservice, hwservice_manager_type;
diff --git a/vendor/file_contexts b/vendor/file_contexts
index 08cc068d..522e4bfe 100644
--- a/vendor/file_contexts
+++ b/vendor/file_contexts
@@ -5,6 +5,7 @@
5/(vendor|system/vendor)/bin/hw/android\.hardware\.bluetooth@1\.0-service u:object_r:hal_bluetooth_default_exec:s0 5/(vendor|system/vendor)/bin/hw/android\.hardware\.bluetooth@1\.0-service u:object_r:hal_bluetooth_default_exec:s0
6/(vendor|system/vendor)/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.1-service u:object_r:hal_fingerprint_default_exec:s0 6/(vendor|system/vendor)/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.1-service u:object_r:hal_fingerprint_default_exec:s0
7/(vendor|system/vendor)/bin/hw/android\.hardware\.boot@1\.0-service u:object_r:hal_bootctl_default_exec:s0 7/(vendor|system/vendor)/bin/hw/android\.hardware\.boot@1\.0-service u:object_r:hal_bootctl_default_exec:s0
8/(vendor|system/vendor)/bin/hw/android\.hardware\.broadcastradio@1\.1-service u:object_r:hal_broadcastradio_default_exec:s0
8/(vendor|system/vendor)/bin/hw/android\.hardware\.camera\.provider@2\.4-service u:object_r:hal_camera_default_exec:s0 9/(vendor|system/vendor)/bin/hw/android\.hardware\.camera\.provider@2\.4-service u:object_r:hal_camera_default_exec:s0
9/(vendor|system/vendor)/bin/hw/android\.hardware\.configstore@1\.[0-9]+-service u:object_r:hal_configstore_default_exec:s0 10/(vendor|system/vendor)/bin/hw/android\.hardware\.configstore@1\.[0-9]+-service u:object_r:hal_configstore_default_exec:s0
10/(vendor|system/vendor)/bin/hw/android\.hardware\.contexthub@1\.0-service u:object_r:hal_contexthub_default_exec:s0 11/(vendor|system/vendor)/bin/hw/android\.hardware\.contexthub@1\.0-service u:object_r:hal_contexthub_default_exec:s0
diff --git a/vendor/hal_broadcastradio_default.te b/vendor/hal_broadcastradio_default.te
new file mode 100644
index 00000000..37f65f4f
--- /dev/null
+++ b/vendor/hal_broadcastradio_default.te
@@ -0,0 +1,5 @@
1type hal_broadcastradio_default, domain;
2hal_server_domain(hal_broadcastradio_default, hal_broadcastradio)
3
4type hal_broadcastradio_default_exec, exec_type, vendor_file_type, file_type;
5init_daemon_domain(hal_broadcastradio_default)