android_device_motorola_sm6.../sepolicy/vendor/hal_power_default.te
Anand S a077049b4b
sm6375-common: sepolicy: Fix connectto denials related to Power HAL
* avc:  denied  { connectto } for  path="/dev/socket/property_service" scontext=u:r:hal_power_default:s0 tcontext=u:r:init:s0 tclass=unix_stream_socket permissive=0

Change-Id: Ida438cb2136e75ffbde76fd7dee3bb283e9f6fe2
2024-08-08 20:16:00 +05:30

38 lines
1 KiB
Text

allow hal_power_default {
vendor_sysfs_devfreq
vendor_sysfs_dt2w
vendor_sysfs_input
vendor_sysfs_msm_subsys
vendor_sysfs_sensors
vendor_sysfs_touchpanel
}:dir search;
allow hal_power_default {
proc
proc_sched
vendor_sysfs_devfreq
proc_sysctl_schedboost
sysfs_devices_system_cpu
vendor_sysfs_devfreq
vendor_sysfs_dt2w
vendor_sysfs_graphics
vendor_sysfs_kgsl
vendor_sysfs_msm_subsys
vendor_sysfs_scsi_host
vendor_sysfs_sensors
vendor_sysfs_touchpanel
}:{
file
lnk_file
} rw_file_perms;
allow hal_power_default init:unix_stream_socket connectto;
allow hal_power_default property_socket:sock_file write;
allow hal_power_default vendor_latency_device:chr_file rw_file_perms;
# Allow Power HAL to read and write to sde-crtc-*
allow hal_power_default vendor_sysfs_sde_crtc:file rw_file_perms;
allow hal_power_default vendor_sysfs_sde_crtc:dir r_dir_perms;
# Rule for hal_power_default to access graphics composer process
unix_socket_connect(hal_power_default, vendor_pps, hal_graphics_composer_default);