sepolicy/hal_sensors.te

#Allow access to nanohub device
allow hal_sensors sensors_device:chr_file rw_file_perms;

# Allow acess to uinput for lidstate determination
allow hal_sensors uhid_device:chr_file rw_file_perms;

# Allow access to persistent partition for calibration data
allow hal_sensors persist_file:dir search;
allow hal_sensors sensors_cal_file:dir create_dir_perms;
allow hal_sensors sensors_cal_file:file create_file_perms;

# Allow access to saved settings file and nanohub_lock dir/file
allow hal_sensors sensor_vendor_data_file:dir create_dir_perms;
allow hal_sensors sensor_vendor_data_file:file create_file_perms;

# Allow access to sensor properties
set_prop(hal_sensors, sensors_prop)

# Allow access to gralloc shared memory (ion), for sensor direct report
allow hal_sensors ion_device:chr_file { open read ioctl };
allow hal_sensors hal_graphics_allocator:fd use;

# allow sensor hal to call scheduling policy service in system server
allow hal_sensors_default system_server:binder call;

# allow access to detect change in /dev folder
allow hal_sensors_default device:dir { open read };