| # Policies for hbtp (host based touch processing) |
| type hbtp, domain; |
| type hbtp_exec, exec_type, vendor_file_type, file_type; |
| init_daemon_domain(hbtp) |
| hal_server_domain(hbtp, hal_hbtp) |
| # Allow access for /dev/hbtp_input and /dev/jdi-bu21150 |
| allow hbtp { hbtp_device qdsp_device dsp_device bu21150_device }:chr_file rw_file_perms; |
| |
| allow hbtp hbtp_log_file:dir rw_dir_perms; |
| allow hbtp hbtp_log_file:file create_file_perms; |
| |
| allow hbtp hbtp_cfg_file:dir r_dir_perms; |
| allow hbtp hbtp_cfg_file:file r_file_perms; |
| |
| allow hbtp firmware_file:dir r_dir_perms; |
| allow hbtp firmware_file:file r_file_perms; |
| |
| allow hbtp sysfs_usb_supply:file r_file_perms; |
| allow hbtp sysfs_usb_supply:dir r_dir_perms; |
| |
| allow hbtp hbtp_kernel_sysfs:file rw_file_perms; |
| |
| allow hbtp sysfs_graphics:file r_file_perms; |
| allow hbtp sysfs_graphics:dir r_dir_perms; |
| |
| allow hbtp sysfs_battery_supply:file r_file_perms; |
| allow hbtp sysfs_battery_supply:dir r_dir_perms; |
| |
| allow hbtp ion_device:chr_file r_file_perms; |
| |
| allow hbtp self:netlink_kobject_uevent_socket { create read setopt bind }; |
| |
| # Allow the service to access wakelock sysfs |
| allow hbtp sysfs_wake_lock:file r_file_perms; |
| |
| # Allow the service to change to system from root |
| allow hbtp self:capability { setgid setuid }; |
| |
| # Allow load touch driver as touchPD |
| r_dir_file(hbtp, adsprpcd_file) |
| |
| # Allow the service to access wakelock capability |
| wakelock_use(hbtp) |
| |
| # Allow hwbinder call from hal client to server and vice-versa |
| binder_call(hal_hbtp_client, hal_hbtp_server) |
| binder_call(hal_hbtp_server, hal_hbtp_client) |
| |
| # Allow hwservice related rules |
| add_hwservice(hal_hbtp_server, hal_hbtp_hwservice) |
| allow hal_hbtp_client hal_hbtp_hwservice:hwservice_manager find; |
| hal_client_domain(hbtp, hal_allocator); |