Skip to content
Snippets Groups Projects
Commit 25578a30 authored by TreeHugger Robot's avatar TreeHugger Robot Committed by Android (Google) Code Review
Browse files

Merge "system_server is a client of configstore" into oc-dr1-dev

parents ed27bec5 23e0a7f2
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
private/app.te
+ 0
− 3
View file @ 25578a30
...@@ -69,9 +69,6 @@ allow appdomain appdomain:fifo_file rw_file_perms; ...@@ -69,9 +69,6 @@ allow appdomain appdomain:fifo_file rw_file_perms;
# Communicate with surfaceflinger. # Communicate with surfaceflinger.
allow appdomain surfaceflinger:unix_stream_socket { read write setopt getattr getopt shutdown }; allow appdomain surfaceflinger:unix_stream_socket { read write setopt getattr getopt shutdown };
# Query whether a Surface supports wide color
allow { appdomain -isolated_app } hal_configstore_ISurfaceFlingerConfigs:hwservice_manager find;
# App sandbox file accesses. # App sandbox file accesses.
allow { appdomain -isolated_app } app_data_file:dir create_dir_perms; allow { appdomain -isolated_app } app_data_file:dir create_dir_perms;
allow { appdomain -isolated_app } app_data_file:notdevfile_class_set create_file_perms; allow { appdomain -isolated_app } app_data_file:notdevfile_class_set create_file_perms;
......
private/surfaceflinger.te
+ 0
− 1
View file @ 25578a30
...@@ -14,7 +14,6 @@ read_runtime_log_tags(surfaceflinger) ...@@ -14,7 +14,6 @@ read_runtime_log_tags(surfaceflinger)
hal_client_domain(surfaceflinger, hal_graphics_allocator) hal_client_domain(surfaceflinger, hal_graphics_allocator)
hal_client_domain(surfaceflinger, hal_graphics_composer) hal_client_domain(surfaceflinger, hal_graphics_composer)
hal_client_domain(surfaceflinger, hal_configstore) hal_client_domain(surfaceflinger, hal_configstore)
allow surfaceflinger hal_configstore_ISurfaceFlingerConfigs:hwservice_manager find;
allow surfaceflinger hidl_token_hwservice:hwservice_manager find; allow surfaceflinger hidl_token_hwservice:hwservice_manager find;
# Perform Binder IPC. # Perform Binder IPC.
......
private/system_server.te
+ 1
− 0
View file @ 25578a30
...@@ -177,6 +177,7 @@ binder_service(system_server) ...@@ -177,6 +177,7 @@ binder_service(system_server)
# Use HALs # Use HALs
hal_client_domain(system_server, hal_allocator) hal_client_domain(system_server, hal_allocator)
hal_client_domain(system_server, hal_configstore)
hal_client_domain(system_server, hal_contexthub) hal_client_domain(system_server, hal_contexthub)
hal_client_domain(system_server, hal_fingerprint) hal_client_domain(system_server, hal_fingerprint)
hal_client_domain(system_server, hal_gnss) hal_client_domain(system_server, hal_gnss)
......
public/hal_configstore.te
+ 2
− 0
View file @ 25578a30
# HwBinder IPC from client to server # HwBinder IPC from client to server
binder_call(hal_configstore_client, hal_configstore_server) binder_call(hal_configstore_client, hal_configstore_server)
allow hal_configstore_client hal_configstore_ISurfaceFlingerConfigs:hwservice_manager find;
add_hwservice(hal_configstore_server, hal_configstore_ISurfaceFlingerConfigs) add_hwservice(hal_configstore_server, hal_configstore_ISurfaceFlingerConfigs)
# As opposed to the rules of most other HALs, the different services exposed by # As opposed to the rules of most other HALs, the different services exposed by
# this HAL should be restricted to different clients. Thus, the allow rules for # this HAL should be restricted to different clients. Thus, the allow rules for
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment