android13/device/rockchip/common/sepolicy/vendor/hal_rockit.te

41 lines
1.6 KiB
Plaintext

type vendor-rockit-hal-1-0, domain;
type vendor-rockit-hal-1-0_exec, exec_type, vendor_file_type, file_type;
# Server
init_daemon_domain(vendor-rockit-hal-1-0)
# Client
add_hwservice(vendor-rockit-hal-1-0, vendor-rockit-hal_hwservice)
allow vendor-rockit-hal-1-0 { ion_device video_device }:chr_file rw_file_perms;
allow vendor-rockit-hal-1-0 sysfs_dev:file r_file_perms;
allow vendor-rockit-hal-1-0 sysfs_dmc:file rw_file_perms;
crash_dump_fallback(vendor-rockit-hal-1-0)
r_dir_file(vendor-rockit-hal-1-0, sdcardfs)
r_dir_file(vendor-rockit-hal-1-0, storage_file)
r_dir_file(vendor-rockit-hal-1-0, mnt_media_rw_file)
r_dir_file(vendor-rockit-hal-1-0, vfat)
hwbinder_use(vendor-rockit-hal-1-0)
vndbinder_use(vendor-rockit-hal-1-0)
rw_rockchip_graphic_device(vendor-rockit-hal-1-0)
get_prop(vendor-rockit-hal-1-0, hwservicemanager_prop)
get_prop(vendor-rockit-hal-1-0, vendor_omx_prop)
binder_call(mediaserver, vendor-rockit-hal-1-0)
binder_call(vendor-rockit-hal-1-0, mediaserver)
binder_call(vendor-rockit-hal-1-0, hwservicemanager)
binder_call(vendor-rockit-hal-1-0, vendor-rockit-hal_hwservice)
binder_call(vendor-rockit-hal_hwservice, vendor-rockit-hal-1-0)
allow vendor-rockit-hal-1-0 video_device:chr_file { read write open ioctl };
allow vendor-rockit-hal-1-0 mnt_media_rw_file:dir { search };
allow vendor-rockit-hal-1-0 vfat:file { open read };
allow vendor-rockit-hal-1-0 vfat:dir { search };
allow vendor-rockit-hal-1-0 hal_graphics_allocator_default:fd use;
allow vendor-rockit-hal-1-0 dmabuf_system_heap_device:chr_file r_file_perms;
allow vendor-rockit-hal-1-0 proc_version:file r_file_perms;