xref: /aosp_15_r20/system/sepolicy/private/secure_element.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker# secure element subsystem
2*e4a36f41SAndroid Build Coastguard Workertypeattribute secure_element coredomain;
3*e4a36f41SAndroid Build Coastguard Workerapp_domain(secure_element)
4*e4a36f41SAndroid Build Coastguard Worker
5*e4a36f41SAndroid Build Coastguard Workerbinder_service(secure_element)
6*e4a36f41SAndroid Build Coastguard Workeradd_service(secure_element, secure_element_service)
7*e4a36f41SAndroid Build Coastguard Worker
8*e4a36f41SAndroid Build Coastguard Workerallow secure_element app_api_service:service_manager find;
9*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(secure_element, hal_secure_element)
10*e4a36f41SAndroid Build Coastguard Worker
11*e4a36f41SAndroid Build Coastguard Worker# already open bugreport file descriptors may be shared with
12*e4a36f41SAndroid Build Coastguard Worker# the secure element process, from a file in
13*e4a36f41SAndroid Build Coastguard Worker# /data/data/com.android.shell/files/bugreports/bugreport-*.
14*e4a36f41SAndroid Build Coastguard Workerallow secure_element shell_data_file:file read;
15*e4a36f41SAndroid Build Coastguard Worker
16*e4a36f41SAndroid Build Coastguard Workerallow secure_element vendor_uuid_mapping_config_file:file r_file_perms;
17