xref: /aosp_15_r20/system/sepolicy/private/automotive_display_service.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker# Display proxy service for Automotive
2*e4a36f41SAndroid Build Coastguard Workertype automotive_display_service, domain, coredomain;
3*e4a36f41SAndroid Build Coastguard Workertype automotive_display_service_exec, system_file_type, exec_type, file_type;
4*e4a36f41SAndroid Build Coastguard Worker
5*e4a36f41SAndroid Build Coastguard Workertypeattribute automotive_display_service automotive_display_service_server;
6*e4a36f41SAndroid Build Coastguard Worker
7*e4a36f41SAndroid Build Coastguard Worker# Allow to add a display service to the hwservicemanager
8*e4a36f41SAndroid Build Coastguard Workeradd_hwservice(automotive_display_service, fwk_automotive_display_hwservice);
9*e4a36f41SAndroid Build Coastguard Worker
10*e4a36f41SAndroid Build Coastguard Worker# Allow init to launch automotive display service
11*e4a36f41SAndroid Build Coastguard Workerinit_daemon_domain(automotive_display_service)
12*e4a36f41SAndroid Build Coastguard Worker
13*e4a36f41SAndroid Build Coastguard Worker# Allow to use Binder IPC for SurfaceFlinger.
14*e4a36f41SAndroid Build Coastguard Workerbinder_use(automotive_display_service)
15*e4a36f41SAndroid Build Coastguard Worker
16*e4a36f41SAndroid Build Coastguard Worker# Allow to use HwBinder IPC for HAL implementations.
17*e4a36f41SAndroid Build Coastguard Workerhwbinder_use(automotive_display_service)
18*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(automotive_display_service, hal_graphics_composer)
19*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(automotive_display_service, hal_graphics_allocator)
20*e4a36f41SAndroid Build Coastguard Worker
21*e4a36f41SAndroid Build Coastguard Worker# Allow to read the target property.
22*e4a36f41SAndroid Build Coastguard Workerget_prop(automotive_display_service, hwservicemanager_prop)
23*e4a36f41SAndroid Build Coastguard Worker
24*e4a36f41SAndroid Build Coastguard Worker# Allow to find SurfaceFlinger.
25*e4a36f41SAndroid Build Coastguard Workerallow automotive_display_service surfaceflinger_service:service_manager find;
26*e4a36f41SAndroid Build Coastguard Worker
27*e4a36f41SAndroid Build Coastguard Worker# Allow client domain to do binder IPC to serverdomain.
28*e4a36f41SAndroid Build Coastguard Workerbinder_call(automotive_display_service, surfaceflinger)
29*e4a36f41SAndroid Build Coastguard Worker
30*e4a36f41SAndroid Build Coastguard Worker# Allow to use a graphics mapper
31*e4a36f41SAndroid Build Coastguard Workerallow automotive_display_service hal_graphics_mapper_hwservice:hwservice_manager find;
32*e4a36f41SAndroid Build Coastguard Worker
33*e4a36f41SAndroid Build Coastguard Worker# Allow to use hidl token service
34*e4a36f41SAndroid Build Coastguard Workerallow automotive_display_service hidl_token_hwservice:hwservice_manager find;
35*e4a36f41SAndroid Build Coastguard Worker
36*e4a36f41SAndroid Build Coastguard Worker# Allow to access EGL files
37*e4a36f41SAndroid Build Coastguard Workerallow automotive_display_service gpu_device:chr_file rw_file_perms;
38*e4a36f41SAndroid Build Coastguard Workerallow automotive_display_service gpu_device:dir search;
39*e4a36f41SAndroid Build Coastguard Worker
40*e4a36f41SAndroid Build Coastguard Worker# Allow to add a service to the servicemanager
41*e4a36f41SAndroid Build Coastguard Workeradd_service(automotive_display_service, fwk_automotive_display_service);
42*e4a36f41SAndroid Build Coastguard Worker
43*e4a36f41SAndroid Build Coastguard Worker# Allow to communicate with EVS services
44*e4a36f41SAndroid Build Coastguard Workerbinder_call(automotive_display_service, hal_evs)
45