Merge "haldomain: add hwbinder_use" am: 51c00faf am: 44b18d64 am: 148a416f

am: d3408e1a

Change-Id: I1f01696a9efbe6ab430e43a70e179aa5925dd079

private/haldomain.te

 ###
 ### Rules for all HAL implementations
 ###
+
+hwbinder_use(haldomain)

public/hal_allocator.te

@@ -3,6 +3,3 @@ type hal_allocator, domain;
 hal_impl_domain(hal_allocator)
 
 type hal_allocator_exec, exec_type, file_type;
-
-# hwbinder access
-hwbinder_use(hal_allocator)

public/hal_audio.te

-hwbinder_use(hal_audio)
 binder_use(hal_audio)
 binder_call(hal_audio, audioserver)
 binder_call(hal_audio, system_server)

public/hal_bluetooth.te

-# hwbinder access
-hwbinder_use(hal_bluetooth)
-
 r_dir_file(hal_bluetooth, system_file)
 
 # call into the Bluetooth process (callbacks)

public/hal_boot.te

@@ -4,8 +4,5 @@ hal_impl_domain(hal_boot)
 
 type hal_boot_exec, exec_type, file_type;
 
-# hwbinder access
-hwbinder_use(hal_boot)
-
 # call into system_server process (callbacks)
 binder_call(hal_boot, system_server)

public/hal_contexthub.te

-# hwbinder access
-hwbinder_use(hal_contexthub)
-
 # call into system_server process (callbacks)
 binder_call(hal_contexthub, system_server)

public/hal_dumpstate.te

-# hwbinder access
-hwbinder_use(hal_dumpstate)
-
 # call into dumpstate process (callbacks)
 binder_call(hal_dumpstate, dumpstate)
 

public/hal_fingerprint.te

-hwbinder_use(hal_fingerprint)
-
 # Scan through /system/lib64/hw looking for installed HALs
 allow hal_fingerprint system_file:dir r_dir_perms;
 

public/hal_gatekeeper.te

-# hwbinder access
-hwbinder_use(hal_gatekeeper)
-
 # call into gatekeeperd process (callbacks)
 binder_call(hal_gatekeeper, gatekeeperd)
 

public/hal_gnss.te

-# hwbinder access
-hwbinder_use(hal_gnss)
-
 binder_call(hal_gnss, system_server)

public/hal_graphics_allocator.te

-# hwbinder access
-hwbinder_use(hal_graphics_allocator)
-
 # GPU device access
 allow hal_graphics_allocator gpu_device:chr_file rw_file_perms;
 allow hal_graphics_allocator ion_device:chr_file r_file_perms;

public/hal_graphics_composer.te

-# HwBinder access
-hwbinder_use(hal_graphics_composer)
 # IComposerCallback
 binder_call(hal_graphics_composer, surfaceflinger)
 

public/hal_health.te

-# hwbinder access
-hwbinder_use(hal_health)
-
 # call into healthd for callbacks
 binder_call(hal_health, healthd)
 

public/hal_ir.te

-# hwbinder access
-hwbinder_use(hal_ir)
-
 # call into system_server process (callbacks)
 binder_call(hal_ir, system_server)

public/hal_light.te

-# hwbinder access
-hwbinder_use(hal_light)
-
 # call into system_server process (callbacks)
 binder_call(hal_light, system_server)

public/hal_memtrack.te

-# hwbinder access
-hwbinder_use(hal_memtrack);

public/hal_nfc.te

-# hwbinder access
-hwbinder_use(hal_nfc)
-
 # call into NFC process (callbacks)
 binder_call(hal_nfc, nfc)
 

public/hal_power.te

-# hwbinder access
-hwbinder_use(hal_power);

public/hal_sensors.te

-# hwbinder access
-hwbinder_use(hal_sensors)

public/hal_telephony.te

 # Perform HwBinder IPC.
-hwbinder_use(hal_telephony)
 binder_call(hal_telephony, radio)
 binder_call(hal_telephony, bluetooth)
-