diff --git a/sepolicy/vendor/file_contexts b/sepolicy/vendor/file_contexts index fc45885..253c408 100644 --- a/sepolicy/vendor/file_contexts +++ b/sepolicy/vendor/file_contexts @@ -41,6 +41,7 @@ /dev/mmw2_thermal u:object_r:therm_device:s0 /dev/opfeature u:object_r:opf_file:s0 /dev/param u:object_r:param_device:s0 +/dev/pn553 u:object_r:nfc_device:s0 /dev/skin_thermal u:object_r:therm_device:s0 /dev/stmvl53l1_ranging u:object_r:vl53l1_device:s0 diff --git a/sepolicy/vendor/hal_nfc_default.te b/sepolicy/vendor/hal_nfc_default.te index 9486137..07ee924 100644 --- a/sepolicy/vendor/hal_nfc_default.te +++ b/sepolicy/vendor/hal_nfc_default.te @@ -1,2 +1,11 @@ +# Allow access to the HALs +hal_client_domain(hal_nfc_default, hal_secure_element) + +# Allow hal_nfc_default to find hal_secure_element_hwservice +allow hal_nfc_default hal_secure_element_hwservice:hwservice_manager find; + allow hal_nfc_default vendor_nfc_vendor_data_file:dir create_dir_perms; allow hal_nfc_default vendor_nfc_vendor_data_file:file create_file_perms; + +# Allow hal_nfc_default to get vendor_nfc_prop +get_prop(hal_nfc_default, vendor_nfc_prop) diff --git a/sepolicy/vendor/hwservice_contexts b/sepolicy/vendor/hwservice_contexts index 038141a..c05a65e 100644 --- a/sepolicy/vendor/hwservice_contexts +++ b/sepolicy/vendor/hwservice_contexts @@ -1,4 +1,7 @@ vendor.goodix.hardware.biometrics.fingerprint::IGoodixFingerprintDaemon u:object_r:hal_fingerprint_hwservice:s0 +vendor.nxp.eventprocessor::INxpEseEvtProcessor u:object_r:hal_secure_element_hwservice:s0 +vendor.nxp.nxpese::INxpEse u:object_r:hal_secure_element_hwservice:s0 +vendor.nxp.nxpnfc::INxpNfc u:object_r:hal_nfc_hwservice:s0 vendor.oneplus.camera.CameraHIDL::IOnePlusCameraProvider u:object_r:hal_cameraHIDL_hwservice:s0 vendor.oneplus.fingerprint.extension::IVendorFingerprintExtensions u:object_r:hal_fingerprint_hwservice:s0 vendor.oneplus.hardware.camera::IOnePlusCameraProvider u:object_r:hal_cameraHIDL_hwservice:s0 diff --git a/sepolicy/vendor/nfc.te b/sepolicy/vendor/nfc.te new file mode 100644 index 0000000..b3465c4 --- /dev/null +++ b/sepolicy/vendor/nfc.te @@ -0,0 +1,2 @@ +# Allow nfc to get vendor_nfc_prop +get_prop(nfc, vendor_nfc_prop) diff --git a/sepolicy/vendor/property_contexts b/sepolicy/vendor/property_contexts index a789e11..93517d0 100644 --- a/sepolicy/vendor/property_contexts +++ b/sepolicy/vendor/property_contexts @@ -1,3 +1,4 @@ +persist.nfc. u:object_r:vendor_nfc_prop:s0 persist.vendor.bluetooth.a2dp. u:object_r:vendor_bluetooth_prop:s0 persist.vendor.bluetooth.bt.uart.log u:object_r:vendor_oem_bluetooth_prop:s0 persist.vendor.cwb.debug u:object_r:vendor_cwb_prop:s0