commit 59f29edf9259012639d097f8781769b39bb9f4bb
author Lily Lin <chiayinglin@google.com> Thu Apr 28 19:04:18 2022 +0800
committer Lily Lin <chiayinglin@google.com> Tue May 10 16:32:45 2022 +0800
tree c4ece260a5630955c42c225172eb28e99fd631a7
parent 615f85c22dc0f75452b3284dd4ba7a421d29a602

Add selinux permissions to r/w sysfs st33spi_state

Bug: 228655141
Test: Confirm can read/write st33spi_state
Change-Id: I65299414d6268580dc532170759459147378418b

whitechapel/vendor/google/euiccpixel_app.te

diff --git a/whitechapel/vendor/google/euiccpixel_app.te b/whitechapel/vendor/google/euiccpixel_app.te
index db71a87..8763117 100644
--- a/whitechapel/vendor/google/euiccpixel_app.te
+++ b/whitechapel/vendor/google/euiccpixel_app.te
@@ -21,5 +21,9 @@
     # Access to directly upgrade firmware on st33spi_device used for engineering devices
     typeattribute st33spi_device mlstrustedobject;
     allow euiccpixel_app st33spi_device:chr_file rw_file_perms;
+
+    allow euiccpixel_app sysfs_st33spi:dir search;
+    allow euiccpixel_app sysfs_st33spi:file rw_file_perms;
+    allow euiccpixel_app sysfs_touch:dir search;
 ')
 

whitechapel/vendor/google/file.te

diff --git a/whitechapel/vendor/google/file.te b/whitechapel/vendor/google/file.te
index 704e075..673bc78 100644
--- a/whitechapel/vendor/google/file.te
+++ b/whitechapel/vendor/google/file.te
@@ -203,6 +203,9 @@
 
 # SecureElement
 type sysfs_st33spi, sysfs_type, fs_type;
+userdebug_or_eng(`
+    typeattribute sysfs_st33spi mlstrustedobject;
+')
 
 # Trusty
 type sysfs_trusty, sysfs_type, fs_type;