xref: /aosp_15_r20/system/sepolicy/vendor/hal_face_default.te (revision e4a36f4174b17bbab9dc043f4a65dc8d87377290)
1*e4a36f41SAndroid Build Coastguard Workertype hal_face_default, domain;
2*e4a36f41SAndroid Build Coastguard Workerhal_server_domain(hal_face_default, hal_face)
3*e4a36f41SAndroid Build Coastguard Worker
4*e4a36f41SAndroid Build Coastguard Workertype hal_face_default_exec, exec_type, vendor_file_type, file_type;
5*e4a36f41SAndroid Build Coastguard Workerinit_daemon_domain(hal_face_default)
6*e4a36f41SAndroid Build Coastguard Worker
7*e4a36f41SAndroid Build Coastguard Worker# android.frameworks.sensorservice through libsensorndkbridge
8*e4a36f41SAndroid Build Coastguard Workerallow hal_face_default fwk_sensor_service:service_manager find;
9*e4a36f41SAndroid Build Coastguard Worker
10*e4a36f41SAndroid Build Coastguard Worker# virtual_face_hal_prop is only for debuggable builds
11*e4a36f41SAndroid Build Coastguard Workerstarting_at_board_api(202504, `
12*e4a36f41SAndroid Build Coastguard Worker  set_prop(hal_face_default, virtual_face_prop)
13*e4a36f41SAndroid Build Coastguard Worker')
14*e4a36f41SAndroid Build Coastguard Worker
15*e4a36f41SAndroid Build Coastguard Workerneverallow { domain -init -dumpstate userdebug_or_eng(`-hal_face_default') not_compatible_property(`-vendor_init') } virtual_face_hal_prop:file no_rw_file_perms;
16*e4a36f41SAndroid Build Coastguard Workerneverallow { domain -init userdebug_or_eng(`-hal_face_default') not_compatible_property(`-vendor_init') } virtual_face_hal_prop:property_service set;
17*e4a36f41SAndroid Build Coastguard Worker
18*e4a36f41SAndroid Build Coastguard Worker
19