common: add policy for powershare HAL

Co-Authored-By: Anay Wadhera <[email protected]> Co-Authored-By: Jake Weinstein <[email protected]> Co-Authored-By: Omkar Chandorkar <[email protected]> Signed-off-by: xenxynon <[email protected]>
P-404 · Dec 24, 2024 · 7f423ce · 7f423ce
1 parent 7d8320e
commit 7f423ce
Show file tree

Hide file tree

Showing 9 changed files with 35 additions and 1 deletion.
diff --git a/private/platform_app.te b/private/platform_app.te
@@ -1 +1,4 @@
 binder_use(platform_app)
+
+# Allow PowerShare HAL service to be found
+hal_client_domain(platform_app, hal_p404_powershare)
diff --git a/private/system_server.te b/private/system_server.te
@@ -3,3 +3,6 @@ set_prop(system_server, device_config_tethering_prop)
 
 # CachedAppOptimizer
 allow system_server zygote_tmpfs:file rw_file_perms;
+
+# Powershare
+hal_client_domain(system_server, hal_p404_powershare)
diff --git a/public/attributes b/public/attributes
@@ -0,0 +1,7 @@
+# HALs
+attribute hal_p404_powershare;
+expandattribute hal_p404_powershare true;
+attribute hal_p404_powershare_client;
+expandattribute hal_p404_powershare_client true;
+attribute hal_p404_powershare_server;
+expandattribute hal_p404_powershare_server false;
diff --git a/public/file.te b/public/file.te
@@ -1,2 +1,5 @@
 # Fastcharge
-type sysfs_fastcharge, sysfs_type, fs_type;
+type sysfs_fastcharge, sysfs_type, fs_type;
+
+# PowerShare
+type sysfs_powershare, sysfs_type, fs_type;
diff --git a/vendor/file_contexts b/vendor/file_contexts
@@ -1,2 +1,5 @@
 # Usb
 /(vendor|system/vendor)/bin/hw/android\.hardware\.usb@1\.0-service\.basic   u:object_r:hal_usb_default_exec:s0
+
+# Powershare
+/(vendor|system/vendor)/bin/hw/vendor\.p404\.powershare-service                 u:object_r:hal_p404_powershare_default_exec:s0
diff --git a/vendor/hal_aospa_powershare.te b/vendor/hal_aospa_powershare.te
@@ -0,0 +1,6 @@
+# HWBinder IPC from client to server
+binder_call(hal_p404_powershare_client, hal_p404_powershare_server)
+hal_attribute_service(hal_p404_powershare, hal_p404_powershare_service)
+binder_call(hal_p404_powershare_server, servicemanager)
+# Allow binder communication with platform_app
+binder_call(hal_p404_powershare, platform_app)
diff --git a/vendor/hal_p404_powershare_default.te b/vendor/hal_p404_powershare_default.te
@@ -0,0 +1,7 @@
+type hal_p404_powershare_default, domain;
+binder_use(hal_p404_powershare_default);
+hal_server_domain(hal_p404_powershare_default, hal_p404_powershare)
+type hal_p404_powershare_default_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_p404_powershare_default)
+# Allow PowerShare HAL to write to PowerShare sysfs node
+allow hal_p404_powershare_default sysfs_powershare:file rw_file_perms;
diff --git a/vendor/service.te b/vendor/service.te
@@ -0,0 +1 @@
+type hal_p404_powershare_service, service_manager_type, vendor_service;
diff --git a/vendor/service_contexts b/vendor/service_contexts
@@ -0,0 +1 @@
+vendor.p404.powershare.IPowerShare/default        u:object_r:hal_p404_powershare_service:s0
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		type hal_p404_powershare_service, service_manager_type, vendor_service;
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		vendor.p404.powershare.IPowerShare/default u:object_r:hal_p404_powershare_service:s0