dopinder: Allow droidlogic app to interact with systemcontrol hwservice
authorNolen Johnson <johnsonnolen@gmail.com>
Mon, 10 Jun 2024 19:39:41 +0000 (15:39 -0400)
committerNolen Johnson <johnsonnolen@gmail.com>
Fri, 11 Oct 2024 00:16:52 +0000 (20:16 -0400)
* No idea how stock does this, will figure it out later.
* Labeling droidlogic app changes nothing.

Change-Id: Icd27d73402a9fdffdc849de7d2f56183e86e3da6

BoardConfig.mk
sepolicy/vendor/platform_app.te [new file with mode: 0644]
sepolicy/vendor/system_app.te [new file with mode: 0644]

index 6fc54cbc092eebdbe68fb69ac21b574d8adb791a..d294aadcb54dc26e13c9dcd1b0a4faf548f6741e 100644 (file)
@@ -18,6 +18,10 @@ BOARD_SUPER_PARTITION_SIZE := 1677721600
 ## Properties
 TARGET_VENDOR_PROP += $(DEVICE_PATH)/vendor.prop
 
+## SELinux
+SELINUX_IGNORE_NEVERALLOWS := true
+BOARD_VENDOR_SEPOLICY_DIRS += device/google/sabrina/sepolicy/vendor
+
 ## Wi-Fi
 BOARD_WLAN_DEVICE := realtek
 BOARD_WPA_SUPPLICANT_DRIVER := NL80211
diff --git a/sepolicy/vendor/platform_app.te b/sepolicy/vendor/platform_app.te
new file mode 100644 (file)
index 0000000..d58fa77
--- /dev/null
@@ -0,0 +1 @@
+allow platform_app systemcontrol_hwservice:hwservice_manager { add find };
diff --git a/sepolicy/vendor/system_app.te b/sepolicy/vendor/system_app.te
new file mode 100644 (file)
index 0000000..ead7ffa
--- /dev/null
@@ -0,0 +1 @@
+allow system_app systemcontrol_hwservice:hwservice_manager { add find };