xref: /aosp_15_r20/system/sepolicy/private/vehicle_binding_util.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker# vehicle binding util startup application
2*e4a36f41SAndroid Build Coastguard Workertype vehicle_binding_util, domain, coredomain;
3*e4a36f41SAndroid Build Coastguard Worker
4*e4a36f41SAndroid Build Coastguard Worker# allow init to start vehicle_binding_util
5*e4a36f41SAndroid Build Coastguard Workertype vehicle_binding_util_exec, exec_type, file_type, system_file_type;
6*e4a36f41SAndroid Build Coastguard Workerinit_daemon_domain(vehicle_binding_util)
7*e4a36f41SAndroid Build Coastguard Worker
8*e4a36f41SAndroid Build Coastguard Worker# allow writing to kmsg during boot
9*e4a36f41SAndroid Build Coastguard Workerallow vehicle_binding_util kmsg_device:chr_file { getattr w_file_perms };
10*e4a36f41SAndroid Build Coastguard Worker
11*e4a36f41SAndroid Build Coastguard Worker# allow reading the binding property from HIDL VHAL.
12*e4a36f41SAndroid Build Coastguard Workerhwbinder_use(vehicle_binding_util)
13*e4a36f41SAndroid Build Coastguard Worker# allow reading the binding property from AIDL VHAL.
14*e4a36f41SAndroid Build Coastguard Workerbinder_use(vehicle_binding_util)
15*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(vehicle_binding_util, hal_vehicle)
16*e4a36f41SAndroid Build Coastguard Worker
17*e4a36f41SAndroid Build Coastguard Worker# allow executing vdc
18*e4a36f41SAndroid Build Coastguard Workerdomain_auto_trans(vehicle_binding_util, vdc_exec, vdc)
19*e4a36f41SAndroid Build Coastguard Worker
20*e4a36f41SAndroid Build Coastguard Worker# devpts is needed to redirect output from vdc
21*e4a36f41SAndroid Build Coastguard Workerallow vehicle_binding_util devpts:chr_file rw_file_perms;
22*e4a36f41SAndroid Build Coastguard Worker
23