xref: /aosp_15_r20/system/sepolicy/vendor/hal_evs_default.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Worker# evs_mock mock hardware driver service
2*e4a36f41SAndroid Build Coastguard Workertype hal_evs_default, domain;
3*e4a36f41SAndroid Build Coastguard Workerhal_server_domain(hal_evs_default, hal_evs)
4*e4a36f41SAndroid Build Coastguard Worker
5*e4a36f41SAndroid Build Coastguard Worker# allow init to launch processes in this context
6*e4a36f41SAndroid Build Coastguard Workertype hal_evs_default_exec, exec_type, vendor_file_type, file_type;
7*e4a36f41SAndroid Build Coastguard Workerinit_daemon_domain(hal_evs_default)
8*e4a36f41SAndroid Build Coastguard Worker
9*e4a36f41SAndroid Build Coastguard Worker# allow to use a graphic buffer
10*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(hal_evs_default, hal_configstore)
11*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(hal_evs_default, hal_graphics_allocator)
12*e4a36f41SAndroid Build Coastguard Workerhal_client_domain(hal_evs_default, hal_graphics_composer)
13*e4a36f41SAndroid Build Coastguard Worker
14*e4a36f41SAndroid Build Coastguard Worker# allow to use automotive display service
15*e4a36f41SAndroid Build Coastguard Workerbinder_call(hal_evs_default, automotive_display_service_server)
16*e4a36f41SAndroid Build Coastguard Workerallow hal_evs_default fwk_automotive_display_hwservice:hwservice_manager find;
17*e4a36f41SAndroid Build Coastguard Workerallow hal_evs_default fwk_automotive_display_service:service_manager find;
18*e4a36f41SAndroid Build Coastguard Worker
19*e4a36f41SAndroid Build Coastguard Worker# allow to use hidl token service to retrieve HGBP object
20*e4a36f41SAndroid Build Coastguard Workerallow hal_evs_default hidl_token_hwservice:hwservice_manager find;
21*e4a36f41SAndroid Build Coastguard Worker
22*e4a36f41SAndroid Build Coastguard Worker# allow to access data from surfaceflinger
23*e4a36f41SAndroid Build Coastguard Workerallow hal_evs_default surfaceflinger:fd use;
24*e4a36f41SAndroid Build Coastguard Worker
25*e4a36f41SAndroid Build Coastguard Worker# allow to access EGL
26*e4a36f41SAndroid Build Coastguard Workerallow hal_evs_default gpu_device:chr_file rw_file_perms;
27*e4a36f41SAndroid Build Coastguard Workerallow hal_evs_default gpu_device:dir search;
28*e4a36f41SAndroid Build Coastguard Worker
29*e4a36f41SAndroid Build Coastguard Worker# allow to monitor uevents and access video devices
30*e4a36f41SAndroid Build Coastguard Workerallow hal_evs_default device:dir r_dir_perms;
31*e4a36f41SAndroid Build Coastguard Workerallow hal_evs_default video_device:chr_file rw_file_perms;
32*e4a36f41SAndroid Build Coastguard Worker
33*e4a36f41SAndroid Build Coastguard Worker# allow to access graphics related properties
34*e4a36f41SAndroid Build Coastguard Workerget_prop(hal_evs_default, graphics_config_prop);
35*e4a36f41SAndroid Build Coastguard Workerget_prop(hal_evs_default, graphics_config_writable_prop)
36*e4a36f41SAndroid Build Coastguard Worker
37*e4a36f41SAndroid Build Coastguard Worker# allow to use binder IPC.
38*e4a36f41SAndroid Build Coastguard Workerbinder_use(hal_evs_default)
39