exynos: Add hal_lineage_livedisplay policy

Change-Id: I82c9c45d6a7e9b153063af65d7f382e33768fcc7
AOSiP · Mar 11, 2020 · 6d42fe1 · 6d42fe1
1 parent ff91532
commit 6d42fe1
Show file tree

Hide file tree

Showing 5 changed files with 47 additions and 0 deletions.
diff --git a/exynos/sepolicy.mk b/exynos/sepolicy.mk
@@ -0,0 +1,23 @@
+#
+# This policy configuration will be used by all exynos products
+# that inherit from Lineage
+#
+
+ifeq ($(TARGET_COPY_OUT_VENDOR), vendor)
+ifeq ($(BOARD_VENDORIMAGE_FILE_SYSTEM_TYPE),)
+TARGET_USES_PREBUILT_VENDOR_SEPOLICY ?= true
+endif
+endif
+
+BOARD_PLAT_PRIVATE_SEPOLICY_DIR += \
+    device/lineage/sepolicy/exynos/private
+
+ifeq ($(TARGET_USES_PREBUILT_VENDOR_SEPOLICY), true)
+BOARD_PLAT_PRIVATE_SEPOLICY_DIR += \
+    device/lineage/sepolicy/exynos/dynamic \
+    device/lineage/sepolicy/exynos/system
+else
+BOARD_SEPOLICY_DIRS += \
+    device/lineage/sepolicy/exynos/dynamic \
+    device/lineage/sepolicy/exynos/vendor
+endif
diff --git a/exynos/system/file_contexts b/exynos/system/file_contexts
@@ -0,0 +1,2 @@
+# LiveDisplay
+/system/bin/hw/lineage\.livedisplay@[0-9]\.[0-9]-service.samsung-exynos    u:object_r:hal_lineage_livedisplay_exynos_exec:s0
diff --git a/exynos/system/hal_lineage_livedisplay_exynos.te b/exynos/system/hal_lineage_livedisplay_exynos.te
@@ -0,0 +1,12 @@
+type hal_lineage_livedisplay_exynos, coredomain, domain;
+hal_server_domain(hal_lineage_livedisplay_exynos, hal_lineage_livedisplay)
+
+type hal_lineage_livedisplay_exynos_exec, exec_type, system_file_type, file_type;
+init_daemon_domain(hal_lineage_livedisplay_exynos)
+
+type hal_display_color_hwservice, hwservice_manager_type;
+allow hal_lineage_livedisplay_exynos hal_display_color_hwservice:hwservice_manager find;
+
+type hal_display_color_default, domain;
+binder_call(hal_lineage_livedisplay_exynos, hal_display_color_default)
+binder_use(hal_lineage_livedisplay_exynos)
diff --git a/exynos/vendor/file_contexts b/exynos/vendor/file_contexts
@@ -0,0 +1,2 @@
+# LiveDisplay HAL
+/(vendor|system/vendor)/bin/hw/vendor\.lineage\.livedisplay@[0-9]\.[0-9]-service\.samsung-exynos    u:object_r:hal_lineage_livedisplay_exynos_exec:s0
diff --git a/exynos/vendor/hal_lineage_livedisplay_exynos.te b/exynos/vendor/hal_lineage_livedisplay_exynos.te
@@ -0,0 +1,8 @@
+type hal_lineage_livedisplay_exynos, domain;
+hal_server_domain(hal_lineage_livedisplay_exynos, hal_lineage_livedisplay)
+
+type hal_lineage_livedisplay_exynos_exec, exec_type, vendor_file_type, file_type;
+init_daemon_domain(hal_lineage_livedisplay_exynos)
+
+# Allow LiveDisplay HAL's default implementation to use vendor-binder service
+vndbinder_use(hal_lineage_livedisplay_exynos)