xref: /aosp_15_r20/system/sepolicy/private/fingerprintd.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Workertypeattribute fingerprintd coredomain;
2*e4a36f41SAndroid Build Coastguard Worker
3*e4a36f41SAndroid Build Coastguard Workerinit_daemon_domain(fingerprintd)
4*e4a36f41SAndroid Build Coastguard Worker
5*e4a36f41SAndroid Build Coastguard Workerbinder_use(fingerprintd)
6*e4a36f41SAndroid Build Coastguard Worker
7*e4a36f41SAndroid Build Coastguard Worker# Scan through /system/lib64/hw looking for installed HALs
8*e4a36f41SAndroid Build Coastguard Workerallow fingerprintd system_file:dir r_dir_perms;
9*e4a36f41SAndroid Build Coastguard Worker
10*e4a36f41SAndroid Build Coastguard Worker# need to find KeyStore and add self
11*e4a36f41SAndroid Build Coastguard Workeradd_service(fingerprintd, fingerprintd_service)
12*e4a36f41SAndroid Build Coastguard Worker
13*e4a36f41SAndroid Build Coastguard Worker# allow HAL module to read dir contents
14*e4a36f41SAndroid Build Coastguard Workerallow fingerprintd fingerprintd_data_file:file { create_file_perms };
15*e4a36f41SAndroid Build Coastguard Worker
16*e4a36f41SAndroid Build Coastguard Worker# allow HAL module to read/write/unlink contents of this dir
17*e4a36f41SAndroid Build Coastguard Workerallow fingerprintd fingerprintd_data_file:dir rw_dir_perms;
18*e4a36f41SAndroid Build Coastguard Worker
19*e4a36f41SAndroid Build Coastguard Worker# Need to add auth tokens to KeyStore
20*e4a36f41SAndroid Build Coastguard Workeruse_keystore(fingerprintd)
21*e4a36f41SAndroid Build Coastguard Workerallow fingerprintd keystore:keystore2 { add_auth };
22*e4a36f41SAndroid Build Coastguard Worker
23*e4a36f41SAndroid Build Coastguard Worker# For permissions checking
24*e4a36f41SAndroid Build Coastguard Workerbinder_call(fingerprintd, system_server);
25*e4a36f41SAndroid Build Coastguard Workerallow fingerprintd permission_service:service_manager find;
26*e4a36f41SAndroid Build Coastguard Worker
27*e4a36f41SAndroid Build Coastguard Workerallow fingerprintd ion_device:chr_file r_file_perms;
28