xref: /aosp_15_r20/system/sepolicy/prebuilts/api/31.0/public/fingerprintd.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Workertype fingerprintd, domain;
2*e4a36f41SAndroid Build Coastguard Workertype fingerprintd_exec, system_file_type, exec_type, file_type;
3*e4a36f41SAndroid Build Coastguard Worker
4*e4a36f41SAndroid Build Coastguard Workerbinder_use(fingerprintd)
5*e4a36f41SAndroid Build Coastguard Worker
6*e4a36f41SAndroid Build Coastguard Worker# Scan through /system/lib64/hw looking for installed HALs
7*e4a36f41SAndroid Build Coastguard Workerallow fingerprintd system_file:dir r_dir_perms;
8*e4a36f41SAndroid Build Coastguard Worker
9*e4a36f41SAndroid Build Coastguard Worker# need to find KeyStore and add self
10*e4a36f41SAndroid Build Coastguard Workeradd_service(fingerprintd, fingerprintd_service)
11*e4a36f41SAndroid Build Coastguard Worker
12*e4a36f41SAndroid Build Coastguard Worker# allow HAL module to read dir contents
13*e4a36f41SAndroid Build Coastguard Workerallow fingerprintd fingerprintd_data_file:file { create_file_perms };
14*e4a36f41SAndroid Build Coastguard Worker
15*e4a36f41SAndroid Build Coastguard Worker# allow HAL module to read/write/unlink contents of this dir
16*e4a36f41SAndroid Build Coastguard Workerallow fingerprintd fingerprintd_data_file:dir rw_dir_perms;
17*e4a36f41SAndroid Build Coastguard Worker
18*e4a36f41SAndroid Build Coastguard Worker# Need to add auth tokens to KeyStore
19*e4a36f41SAndroid Build Coastguard Workeruse_keystore(fingerprintd)
20*e4a36f41SAndroid Build Coastguard Workerallow fingerprintd keystore:keystore_key { add_auth };
21*e4a36f41SAndroid Build Coastguard Workerallow fingerprintd keystore:keystore2 { add_auth };
22*e4a36f41SAndroid Build Coastguard Worker
23*e4a36f41SAndroid Build Coastguard Worker# For permissions checking
24*e4a36f41SAndroid Build Coastguard Workerbinder_call(fingerprintd, system_server);
25*e4a36f41SAndroid Build Coastguard Workerallow fingerprintd permission_service:service_manager find;
26*e4a36f41SAndroid Build Coastguard Worker
27*e4a36f41SAndroid Build Coastguard Workerallow fingerprintd ion_device:chr_file r_file_perms;
28