From f6d7bb6ad008e3bdb2f74411b102800c750de242 Mon Sep 17 00:00:00 2001 From: Marco Marinho Date: Sun, 7 Nov 2021 16:59:41 +0000 Subject: sepolicy_vndr: qva: Don't protect vendor_hal_qesdhal_hwservice QSSI sepolicy grants permissions for untrusted_app to be a client of the qesd HAL. It is not allowed for all_untrusted_apps to find protected hwservice, hence don't protect the hwservice. Change-Id: I7fdfb16c0aa22da9793ac25856ffd45e197456fa --- qva/vendor/common/hwservice.te | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/qva/vendor/common/hwservice.te b/qva/vendor/common/hwservice.te index 6d6a408b..fc77e73d 100644 --- a/qva/vendor/common/hwservice.te +++ b/qva/vendor/common/hwservice.te @@ -54,7 +54,7 @@ type vendor_hal_srvctracker_hwservice, hwservice_manager_type, protected_hwservi type vendor_hal_secureprocessor_hwservice, hwservice_manager_type, protected_hwservice; #untrusted_app_visible_hwservice_violators no longer needed as blacklisting of hwservice is changed type vendor_hal_qspmhal_hwservice, hwservice_manager_type; -type vendor_hal_qesdhal_hwservice, hwservice_manager_type, protected_hwservice; +type vendor_hal_qesdhal_hwservice, hwservice_manager_type; type vendor_hal_bluetooth_dun_hwservice, hwservice_manager_type, protected_hwservice; type vendor_hal_qseecom_hwservice, hwservice_manager_type, protected_hwservice; type vendor_hal_qccvndhal_hwservice , hwservice_manager_type, protected_hwservice; -- cgit v1.2.3