xref: /aosp_15_r20/system/sepolicy/private/hal_lowpan.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker# HwBinder IPC from client to server, and callbacks
2*e4a36f41SAndroid Build Coastguard Workerbinder_call(hal_lowpan_client, hal_lowpan_server)
3*e4a36f41SAndroid Build Coastguard Workerbinder_call(hal_lowpan_server, hal_lowpan_client)
4*e4a36f41SAndroid Build Coastguard Worker
5*e4a36f41SAndroid Build Coastguard Worker
6*e4a36f41SAndroid Build Coastguard Worker# Allow hal_lowpan_client to be able to find the hal_lowpan_server
7*e4a36f41SAndroid Build Coastguard Workerhal_attribute_hwservice(hal_lowpan, hal_lowpan_hwservice)
8*e4a36f41SAndroid Build Coastguard Worker
9*e4a36f41SAndroid Build Coastguard Worker# hal_lowpan domain can write/read to/from lowpan_prop
10*e4a36f41SAndroid Build Coastguard Workerset_prop(hal_lowpan_server, lowpan_prop)
11*e4a36f41SAndroid Build Coastguard Worker
12*e4a36f41SAndroid Build Coastguard Worker# Allow hal_lowpan_server to open lowpan_devices
13*e4a36f41SAndroid Build Coastguard Workerallow hal_lowpan_server lowpan_device:chr_file rw_file_perms;
14*e4a36f41SAndroid Build Coastguard Worker
15*e4a36f41SAndroid Build Coastguard Worker###
16*e4a36f41SAndroid Build Coastguard Worker### neverallow rules
17*e4a36f41SAndroid Build Coastguard Worker###
18*e4a36f41SAndroid Build Coastguard Worker
19*e4a36f41SAndroid Build Coastguard Worker# Only LoWPAN HAL may directly access LoWPAN hardware
20*e4a36f41SAndroid Build Coastguard Workerneverallow { domain -hal_lowpan_server -init -ueventd } lowpan_device:chr_file ~getattr;
21