sepolicy:permission for untrusted_app to access

permission for untrusted_app with sdk version 30
to access qesdk.

Change-Id: I17886936dcdb44b4d824be04dc4e13ae7c9d502c
CRs-Fixed: 2985891
This commit is contained in:
Taiyab Haque
2021-07-07 13:45:06 +05:30
parent 5cd71f300f
commit a14e33b18a
2 changed files with 2 additions and 4 deletions

View File

@@ -30,12 +30,9 @@ typeattribute vendor_qesdk_app coredomain;
app_domain(vendor_qesdk_app)
#allow vendor_qesdk_app to access vendor_hal_qesdhal
qesdk_app_access(vendor_qesdk_app);
allow vendor_qesdk_app activity_service:service_manager find;
allow vendor_qesdk_app content_capture_service:service_manager find;
allow vendor_qesdk_app system_data_file:dir search;
allow vendor_qesdk_app system_app_data_file:dir { getattr search };
allow vendor_qesdk_app tethering_service:service_manager find;
allow vendor_qesdk_app user_profile_root_file:dir search;
allow vendor_qesdk_app vendor_perf_service:service_manager find;
allow vendor_qesdk_app app_api_service:service_manager find;
hal_client_domain(vendor_qesdk_app, vendor_hal_perf)
add_service(vendor_qesdk_app, vendor_qesdk_service);

View File

@@ -34,3 +34,4 @@ userdebug_or_eng(`
')
unix_socket_connect(untrusted_app, vendor_qvrd, vendor_qvrd);
allow untrusted_app vendor_qvrd:fd use;
qesdk_app_access(untrusted_app);