universal7870: update sepolicy (wip)

This commit is contained in:
Astrako 2020-03-26 11:38:15 +01:00 committed by Alejandro
parent 841f56ecbf
commit 4cd64b76bd
46 changed files with 515 additions and 184 deletions

View file

@ -0,0 +1,24 @@
#### sensorhubservice
#
type sensorhubservice, domain, coredomain;
type sensorhubservice_exec, exec_type, file_type, system_file_type;
type sensorhubservice_service, app_api_service, system_server_service, service_manager_type;
init_daemon_domain(sensorhubservice)
# /dev/input[0-9]*
allow sensorhubservice input_device:dir r_dir_perms;
allow sensorhubservice { input_device sensor_device }:chr_file rw_file_perms;
# binder call
allow sensorhubservice servicemanager:binder { call transfer };
allow sensorhubservice sysfs:file { getattr open read };
# sysfs_virtual
allow sensorhubservice sysfs_virtual:file { open read getattr setattr };
allow sensorhubservice sysfs_virtual:dir { open read search };
allow sensorhubservice sysfs_virtual:lnk_file read;
allow sensorhubservice sysfs_input:dir search;
allow sensorhubservice sysfs_input:lnk_file read;
allow sensorhubservice sysfs_input:file { read write open getattr };