crosshatch-sepolicy: add permissions to wlc_hal for callbacks
Permissions updated because wlc_hal updated to trigger callbacks
Bug: 141026436
Test: Register callback and check for sepolicy denials
Change-Id: Idaa90ed305d7ad2d853104ceea4616ed581b44b4
Signed-off-by: Wilson Chan <wtchan@google.com>
(cherry picked from commit 6425cd1d3a8e730df2442b2f421bc5a9c59e34b0)
Merged-In: Idaa90ed305d7ad2d853104ceea4616ed581b44b4
diff --git a/vendor/qcom/common/hal_wlc.te b/vendor/qcom/common/hal_wlc.te
index dabcf87..716ed24 100644
--- a/vendor/qcom/common/hal_wlc.te
+++ b/vendor/qcom/common/hal_wlc.te
@@ -15,3 +15,5 @@
allow hal_wlc sysfs_wlc:file rw_file_perms;
allow hal_wlc self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;
+
+binder_call(hal_wlc, platform_app)
diff --git a/vendor/qcom/common/platform_app.te b/vendor/qcom/common/platform_app.te
index d268a1c..cf27369 100644
--- a/vendor/qcom/common/platform_app.te
+++ b/vendor/qcom/common/platform_app.te
@@ -5,3 +5,4 @@
# To find and bind hal_wlc
allow platform_app hal_wlc_hwservice:hwservice_manager find;
allow platform_app hal_wlc:binder call;
+allow platform_app hal_wlc:binder { call transfer };
