Commit 6a9e4654 authored Aug 03, 2022 by Blaster4385

nicky: sepolicy: Address more fingerprint denials

- Label correct service
- Label some props
- Label fpc nodes

parent 236673db

sepolicy/vendor/file.te

+1 −0

Original line number	Diff line number	Diff line
		@@ -19,6 +19,7 @@ type vendor_persist_engineer_file, file_type;
		type vendor_proc_engineer, fs_type, proc_type;

		# Fingerprint
		type sysfs_hal_fingerprint_default, fs_type, sysfs_type;
		type vendor_proc_fingerprint, fs_type, proc_type;

		# Sensors

sepolicy/vendor/file_contexts

+5 −1

Original line number	Diff line number	Diff line
		@@ -8,9 +8,13 @@

		# Fingerprint
		/(odm\|vendor/odm)/bin/hw/vendor\.oplus\.hardware\.biometrics\.fingerprint@2\.1-service u:object_r:hal_fingerprint_default_exec:s0
		/(vendor\|system/vendor)/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.3-service\.oplus u:object_r:hal_fingerprint_default_exec:s0
		/(vendor\|system/vendor)/bin/hw/android\.hardware\.biometrics\.fingerprint@2\.3-service\.nicky u:object_r:hal_fingerprint_default_exec:s0
		/dev/goodix_fp u:object_r:fingerprint_device:s0

		/sys/devices/platform/soc/soc:fpc_fpc1020/irq u:object_r:sysfs_hal_fingerprint_default:s0
		/sys/devices/platform/soc/soc:fpc_fpc1020/irq_enable u:object_r:sysfs_hal_fingerprint_default:s0
		/sys/devices/platform/soc/soc:fpc_fpc1020/wakelock_enable u:object_r:sysfs_hal_fingerprint_default:s0

		# Init
		/(odm\|vendor/odm)/bin/init\.oplus\.sh u:object_r:vendor_qti_init_shell_exec:s0

sepolicy/vendor/hal_fingerprint_default.te

+3 −0

Original line number	Diff line number	Diff line
		@@ -17,5 +17,8 @@ set_prop(hal_fingerprint_default, vendor_fingerprint_prop)
		allow hal_fingerprint_default sysfs_devfreq:dir { search read };
		allow hal_fingerprint_default sysfs:file { write };
		allow hal_fingerprint_default sysfs_devfreq:file { read open getattr };
		allow hal_fingerprint_default uhid_device:chr_file rw_file_perms;
		allow hal_fingerprint_default uhid_device:chr_file { write open ioctl };
		allow hal_fingerprint_default sysfs_hal_fingerprint_default:file { write open read };

		set_prop(hal_fingerprint_default, vendor_fingerprint_prop);

sepolicy/vendor/property_contexts

+2 −0

Original line number	Diff line number	Diff line
		@@ -3,6 +3,8 @@ vendor.dps.dump.composerpid u:object_r:vendor_display_prop:s0

		# Fingerprint
		oppo.fpc.sw.version u:object_r:vendor_fingerprint_prop:s0
		oppo.fingerprint.qrcode.support u:object_r:vendor_fingerprint_prop:s0
		oppo.fingerprint.qrcode.value u:object_r:vendor_fingerprint_prop:s0
		persist.vendor.fingerprint. u:object_r:vendor_fingerprint_prop:s0
		vendor.fingerprint. u:object_r:vendor_fingerprint_prop:s0