Commit b57733f3 authored by ssizon's avatar ssizon Committed by Romain Hunault
Browse files

FP3: Add sepolicies required by fingerprint sensor

parent e3a8067a
......@@ -209,6 +209,7 @@ TARGET_PROVIDES_LIBLIGHT := true
# SELinux
include device/qcom/sepolicy/sepolicy.mk
BOARD_SEPOLICY_DIRS += $(DEVICE_PATH)/sepolicy/vendor
# Soong namespaces
PRODUCT_SOONG_NAMESPACES += $(DEVICE_PATH)
......
# elan finger print system_server
allow appdomain elanfp_device:chr_file rw_file_perms;
# elan finger print dev
type elanfp_device, dev_type;
type elanfp_data, file_type, data_file_type;
# elan finger print selinux
/dev/elan_fp u:object_r:elanfp_device:s0
#/data/elan(/.*)? u:object_r:elanfp_data:s0
allow hal_fingerprint_default elanfp_device:chr_file rw_file_perms;
allow hal_fingerprint_default tee_device:chr_file rw_file_perms;
allow hal_fingerprint_default firmware_file:dir { getattr search open read lock ioctl };
allow hal_fingerprint_default firmware_file:file { getattr open read lock ioctl };
#[Kent][fingerprint][170251503][Begin]porting fingerprint sensor
set_prop(hal_fingerprint_default, fps_vendor_prop)
#[Kent][fingerprint][17062701][end]add vendor property
#add permission to fingerprintd
allow hal_graphics_composer_default hal_fingerprint_default:process { signal };
# elan finger print system_server
allow platform_app elanfp_device:chr_file rw_file_perms;
#[SM42][fingerprint][kent][17110101][begin]add writing property permission
type fps_vendor_prop, property_type;
#[SM42][fingerprint][kent][17110101][end]add writing property permission
#[SM42][fingerprint][kent][17110101][begin]add writing property permission
ro.fps.module u:object_r:fps_vendor_prop:s0
ro.fps.sw.version u:object_r:fps_vendor_prop:s0
ro.fps.vendor u:object_r:fps_vendor_prop:s0
ro.fps.pt.errorbin u:object_r:fps_vendor_prop:s0
ro.fps.pt.version u:object_r:fps_vendor_prop:s0
ro.fps.pt.features u:object_r:fps_vendor_prop:s0
#[SM42][fingerprint][kent][17110101][begin]add writing property permission
ro.fingerprint.module u:object_r:fps_vendor_prop:s0
#elan finger print system_server
allow system_app elanfp_device:chr_file rw_file_perms;
get_prop(system_app, fps_vendor_prop)
# elan finger print system_server
allow system_server elanfp_device:chr_file rw_file_perms;
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment