Skip to content
Snippets Groups Projects
Select Git revision
  • c15e1036d4adc7d2a62bbdd382ed688da367dade
  • master default protected
  • android-7.1.2_r28_klist
  • pie-cts-release
  • pie-vts-release
  • pie-cts-dev
  • oreo-mr1-iot-release
  • sdk-release
  • oreo-m6-s4-release
  • oreo-m4-s12-release
  • pie-release
  • pie-r2-release
  • pie-r2-s1-release
  • oreo-vts-release
  • oreo-cts-release
  • oreo-dev
  • oreo-mr1-dev
  • pie-gsi
  • pie-platform-release
  • pie-dev
  • oreo-cts-dev
  • android-o-mr1-iot-release-1.0.4
  • android-9.0.0_r8
  • android-9.0.0_r7
  • android-9.0.0_r6
  • android-9.0.0_r5
  • android-8.1.0_r46
  • android-8.1.0_r45
  • android-n-iot-release-smart-display-r2
  • android-vts-8.1_r5
  • android-cts-8.1_r8
  • android-cts-8.0_r12
  • android-cts-7.1_r20
  • android-cts-7.0_r24
  • android-o-mr1-iot-release-1.0.3
  • android-cts-9.0_r1
  • android-8.1.0_r43
  • android-8.1.0_r42
  • android-n-iot-release-smart-display
  • android-p-preview-5
  • android-9.0.0_r3
41 results

nfc.te

Blame
    • Jeff Vander Stoep's avatar
      d22987b4
      Create attribute for moving perms out of domain · d22987b4
      Jeff Vander Stoep authored
      Motivation: Domain is overly permissive. Start removing permissions
      from domain and assign them to the domain_deprecated attribute.
      Domain_deprecated and domain can initially be assigned to all
      domains. The goal is to not assign domain_deprecated to new domains
      and to start removing domain_deprecated where it is not required or
      reassigning the appropriate permissions to the inheriting domain
      when necessary.
      
      Bug: 25433265
      Change-Id: I8b11cb137df7bdd382629c98d916a73fe276413c
      d22987b4
      History
      Create attribute for moving perms out of domain
      Jeff Vander Stoep authored
      Motivation: Domain is overly permissive. Start removing permissions
      from domain and assign them to the domain_deprecated attribute.
      Domain_deprecated and domain can initially be assigned to all
      domains. The goal is to not assign domain_deprecated to new domains
      and to start removing domain_deprecated where it is not required or
      reassigning the appropriate permissions to the inheriting domain
      when necessary.
      
      Bug: 25433265
      Change-Id: I8b11cb137df7bdd382629c98d916a73fe276413c
    nfc.te 984 B
    # nfc subsystem
    type nfc, domain, domain_deprecated;
    app_domain(nfc)
    net_domain(nfc)
    binder_service(nfc)
    
    # Set NFC properties
    set_prop(nfc, nfc_prop)
    
    # NFC device access.
    allow nfc nfc_device:chr_file rw_file_perms;
    
    # Data file accesses.
    allow nfc nfc_data_file:dir create_dir_perms;
    allow nfc nfc_data_file:notdevfile_class_set create_file_perms;
    
    allow nfc sysfs_nfc_power_writable:file rw_file_perms;
    allow nfc sysfs:file write;
    
    allow nfc drmserver_service:service_manager find;
    allow nfc mediaserver_service:service_manager find;
    allow nfc nfc_service:service_manager { add find };
    allow nfc radio_service:service_manager find;
    allow nfc surfaceflinger_service:service_manager find;
    allow nfc app_api_service:service_manager find;
    allow nfc system_api_service:service_manager find;
    
    # already open bugreport file descriptors may be shared with
    # the nfc process, from a file in
    # /data/data/com.android.shell/files/bugreports/bugreport-*.
    allow nfc shell_data_file:file read;