Merge "Add secure_element_device" into pi-dev

178d0adb · TreeHugger Robot · Android (Google) Code Review · 5c51354c · e0e2342e · 178d0adb
Commit 178d0adb authored 7 years ago by TreeHugger Robot Committed by Android (Google) Code Review 7 years ago
--- a/private/compat/26.0/26.0.ignore.cil
+++ b/private/compat/26.0/26.0.ignore.cil
@@ -67,6 +67,7 @@
    perfprofd_service
    property_info
    secure_element
+    secure_element_device
    secure_element_tmpfs
    secure_element_service
    slice_service

--- a/private/compat/27.0/27.0.ignore.cil
+++ b/private/compat/27.0/27.0.ignore.cil
@@ -54,6 +54,7 @@
    perfprofd_service
    property_info
    secure_element
+    secure_element_device
    secure_element_service
    secure_element_tmpfs
    slice_service

--- a/public/device.te
+++ b/public/device.te
@@ -39,6 +39,7 @@ type kmsg_device, dev_type;
 type kmsg_debug_device, dev_type;
 type null_device, dev_type, mlstrustedobject;
 type random_device, dev_type, mlstrustedobject;
+type secure_element_device, dev_type;
 type sensors_device, dev_type;
 type serial_device, dev_type;
 type socket_device, dev_type;

--- a/vendor/hal_secure_element_default.te
+++ b/vendor/hal_secure_element_default.te
@@ -2,4 +2,6 @@ type hal_secure_element_default, domain;
 hal_server_domain(hal_secure_element_default, hal_secure_element)
 type hal_secure_element_default_exec, exec_type, vendor_file_type, file_type;
+allow hal_secure_element_default secure_element_device:chr_file rw_file_perms;
 init_daemon_domain(hal_secure_element_default)