xref: /aosp_15_r20/system/sepolicy/private/hal_sensors.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker# HwBinder IPC from client to server
2*e4a36f41SAndroid Build Coastguard Workerbinder_call(hal_sensors_client, hal_sensors_server)
3*e4a36f41SAndroid Build Coastguard Worker
4*e4a36f41SAndroid Build Coastguard Workerhal_attribute_hwservice(hal_sensors, hal_sensors_hwservice)
5*e4a36f41SAndroid Build Coastguard Worker
6*e4a36f41SAndroid Build Coastguard Worker# Allow sensor hals to access ashmem memory allocated by apps
7*e4a36f41SAndroid Build Coastguard Workerallow hal_sensors { appdomain -isolated_app }:fd use;
8*e4a36f41SAndroid Build Coastguard Worker
9*e4a36f41SAndroid Build Coastguard Worker# Allow sensor hals to access ashmem memory allocated by android.hidl.allocator
10*e4a36f41SAndroid Build Coastguard Worker# fd is passed in from framework sensorservice HAL.
11*e4a36f41SAndroid Build Coastguard Workerallow hal_sensors hal_allocator:fd use;
12*e4a36f41SAndroid Build Coastguard Worker
13*e4a36f41SAndroid Build Coastguard Worker# allow to run with real-time scheduling policy
14*e4a36f41SAndroid Build Coastguard Workerallow hal_sensors self:global_capability_class_set sys_nice;
15*e4a36f41SAndroid Build Coastguard Worker
16*e4a36f41SAndroid Build Coastguard Workeradd_service(hal_sensors_server, hal_sensors_service)
17*e4a36f41SAndroid Build Coastguard Workerbinder_call(hal_sensors_server, servicemanager)
18*e4a36f41SAndroid Build Coastguard Worker
19*e4a36f41SAndroid Build Coastguard Workerallow hal_sensors_client hal_sensors_service:service_manager find;
20