summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMichael Bestas <mkbestas@lineageos.org>2024-12-11 05:15:30 +0200
committerMichael Bestas <mkbestas@lineageos.org>2024-12-11 05:15:30 +0200
commitdcf68838c5c284675c57e47aeb4413fefa3a4652 (patch)
tree204ed72c18f81873d305d645db272e72d405e459
parent3341035e959e48064784039e7f2220c5674afff5 (diff)
parent759a2f2ef2d774d8e0fa26b04e1b4851740012d6 (diff)
Merge branch 'main' of https://android.googlesource.com/device/google/redbull-sepolicy into lineage-22.0
* 'main' of https://android.googlesource.com/device/google/redbull-sepolicy: Exclude coredomain access from hal_fingerprint Change-Id: Id93563af931d7f202c726fe71cbf26470260fb54
-rw-r--r--sepolicy/vendor/google/hal_fingerprint.te2
1 files changed, 1 insertions, 1 deletions
diff --git a/sepolicy/vendor/google/hal_fingerprint.te b/sepolicy/vendor/google/hal_fingerprint.te
index 7de66923..f0dbd00a 100644
--- a/sepolicy/vendor/google/hal_fingerprint.te
+++ b/sepolicy/vendor/google/hal_fingerprint.te
@@ -2,7 +2,7 @@ allow hal_fingerprint sysfs_fingerprint:dir r_dir_perms;
allow hal_fingerprint sysfs_fingerprint:file rw_file_perms;
allow hal_fingerprint sysfs_msm_subsys:dir search;
allow hal_fingerprint sysfs_msm_subsys:file r_file_perms;
-allow hal_fingerprint tee_device:chr_file rw_file_perms;
+allow { hal_fingerprint -coredomain } tee_device:chr_file rw_file_perms;
allow hal_fingerprint uhid_device:chr_file rw_file_perms;
allow hal_fingerprint fwk_stats_hwservice:hwservice_manager find;
binder_call(hal_fingerprint_default, statsd);