xref: /aosp_15_r20/system/sepolicy/prebuilts/api/31.0/public/bootanim.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker# bootanimation oneshot service
2*e4a36f41SAndroid Build Coastguard Workertype bootanim, domain;
3*e4a36f41SAndroid Build Coastguard Workertype bootanim_exec, system_file_type, exec_type, file_type;
4*e4a36f41SAndroid Build Coastguard Worker
5*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(bootanim, hal_configstore)
6*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(bootanim, hal_graphics_allocator)
7*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(bootanim, hal_graphics_composer)
8*e4a36f41SAndroid Build Coastguard Worker
9*e4a36f41SAndroid Build Coastguard Workerbinder_use(bootanim)
10*e4a36f41SAndroid Build Coastguard Workerbinder_call(bootanim, surfaceflinger)
11*e4a36f41SAndroid Build Coastguard Workerbinder_call(bootanim, audioserver)
12*e4a36f41SAndroid Build Coastguard Worker
13*e4a36f41SAndroid Build Coastguard Workerhwbinder_use(bootanim)
14*e4a36f41SAndroid Build Coastguard Worker
15*e4a36f41SAndroid Build Coastguard Workerallow bootanim gpu_device:chr_file rw_file_perms;
16*e4a36f41SAndroid Build Coastguard Worker
17*e4a36f41SAndroid Build Coastguard Worker# /oem access
18*e4a36f41SAndroid Build Coastguard Workerallow bootanim oemfs:dir search;
19*e4a36f41SAndroid Build Coastguard Workerallow bootanim oemfs:file r_file_perms;
20*e4a36f41SAndroid Build Coastguard Worker
21*e4a36f41SAndroid Build Coastguard Workerallow bootanim audio_device:dir r_dir_perms;
22*e4a36f41SAndroid Build Coastguard Workerallow bootanim audio_device:chr_file rw_file_perms;
23*e4a36f41SAndroid Build Coastguard Worker
24*e4a36f41SAndroid Build Coastguard Workerallow bootanim audioserver_service:service_manager find;
25*e4a36f41SAndroid Build Coastguard Workerallow bootanim surfaceflinger_service:service_manager find;
26*e4a36f41SAndroid Build Coastguard Workerallow bootanim surfaceflinger:unix_stream_socket { read write };
27*e4a36f41SAndroid Build Coastguard Worker
28*e4a36f41SAndroid Build Coastguard Worker# Allow access to ion memory allocation device
29*e4a36f41SAndroid Build Coastguard Workerallow bootanim ion_device:chr_file rw_file_perms;
30*e4a36f41SAndroid Build Coastguard Worker
31*e4a36f41SAndroid Build Coastguard Worker# Allow access to DMA-BUF system heap
32*e4a36f41SAndroid Build Coastguard Workerallow bootanim dmabuf_system_heap_device:chr_file r_file_perms;
33*e4a36f41SAndroid Build Coastguard Worker
34*e4a36f41SAndroid Build Coastguard Workerallow bootanim hal_graphics_allocator:fd use;
35*e4a36f41SAndroid Build Coastguard Worker
36*e4a36f41SAndroid Build Coastguard Worker# Fences
37*e4a36f41SAndroid Build Coastguard Workerallow bootanim hal_graphics_composer:fd use;
38*e4a36f41SAndroid Build Coastguard Worker
39*e4a36f41SAndroid Build Coastguard Worker# Read access to pseudo filesystems.
40*e4a36f41SAndroid Build Coastguard Workerallow bootanim proc_meminfo:file r_file_perms;
41*e4a36f41SAndroid Build Coastguard Worker
42*e4a36f41SAndroid Build Coastguard Worker# System file accesses.
43*e4a36f41SAndroid Build Coastguard Workerallow bootanim system_file:dir r_dir_perms;
44