Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit e23c7007 authored Dec 01, 2024 by Sahil Sonar

tetris: sepolicy: Address fingerprint denials

parent fe710947

sepolicy/vendor/file.te

+3 −0

Original line number	Diff line number	Diff line
		type proc_vibrator, fs_type, proc_type;
		type proc_touchpanel, fs_type, proc_type;
		type aac_richtap_dev_device, dev_type;
		type fingerprint_data_file, data_file_type, file_type;
		type vendor_sysfs_graphics, fs_type, sysfs_type, mlstrustedobject;

sepolicy/vendor/file_contexts

+5 −0

Original line number	Diff line number	Diff line
		# Fingerprint
		/data/misc/gf_data(/.*)? u:object_r:fingerprint_data_file:s0
		/(vendor\|system/vendor)/bin/hw/vendor\.nothing\.hardware\.biometrics\.fingerprint-service u:object_r:hal_fingerprint_default_exec:s0

		# Richtap
		/dev/aac_richtap u:object_r:aac_richtap_dev_device:s0

sepolicy/vendor/genfs_contexts

+9 −0

Original line number	Diff line number	Diff line
		# Haptics
		genfscon proc /haptic/lra_resistance u:object_r:proc_vibrator:s0
		genfscon proc /haptic/gpp u:object_r:proc_vibrator:s0
		genfscon proc /haptic/f0 u:object_r:proc_vibrator:s0

		# Fingerprint
		genfscon proc /touchpanel u:object_r:proc_touchpanel:s0
		genfscon sysfs /devices/platform/soc/11013000.spi3/spi_master/spi3/spi3.0/fts_fod_mode u:object_r:vendor_sysfs_graphics:s0
		genfscon sysfs /devices/platform/soc/1401a000.dsi0/hbm u:object_r:vendor_sysfs_graphics:s0
		genfscon sysfs /devices/platform/display_id/brightnessid u:object_r:vendor_sysfs_graphics:s0
		genfscon sysfs /panel_feature/brightness_sync u:object_r:vendor_sysfs_graphics:s0
		genfscon sysfs /panel_feature/ui_status u:object_r:vendor_sysfs_graphics:s0

sepolicy/vendor/hal_fingerprint_default.te

0 → 100644

+8 −0

Original line number	Diff line number	Diff line
		allow hal_fingerprint_default fingerprint_data_file:file create_file_perms;
		allow hal_fingerprint_default fingerprint_data_file:dir create_dir_perms;
		allow hal_fingerprint_default proc_touchpanel:file rw_file_perms;
		allow hal_fingerprint_default proc_touchpanel:dir r_dir_perms;
		allow hal_fingerprint_default vendor_sysfs_graphics:file rw_file_perms;

		get_prop(hal_fingerprint_default, vendor_fp_prop);
		set_prop(hal_fingerprint_default, vendor_fp_prop)

sepolicy/vendor/hwservice_contexts

+4 −0

Original line number	Diff line number	Diff line
		# Fingerprint
		vendor.goodix.hardware.biometrics.fingerprint::IGoodixFingerprintDaemon u:object_r:hal_fingerprint_hwservice:s0

		# Richatap
		vendor.aac.hardware.richtap.vibrator::IRichtapVibrator u:object_r:hal_vibrator_hwservice:s0