commit 195552c979a10d32832ca50c940761459fd4af02
author Mikhail Naganov <mnaganov@google.com> Fri Dec 16 11:25:23 2016 -0800
committer Mikhail Naganov <mnaganov@google.com> Wed Dec 21 16:15:22 2016 -0800
tree 2db2479375b9b8fa1eb2f4c3c928c3b37bc27c59
parent c7010c519d85983e46f7105dc7197384ca3847fc

Update sepolicy for audio hal

The rules in audioserver are in fact for the hal code
which run as hal_audio in binderized hal mode.

Bug: 33818663
Change-Id: I0c8a12575eb8571f9af6e796b6f92f27e41d0e32

sepolicy/hal_audio.te

diff --git a/sepolicy/hal_audio.te b/sepolicy/hal_audio.te
new file mode 100644
index 0000000..b8a1de0
--- /dev/null
+++ b/sepolicy/hal_audio.te
@@ -0,0 +1,7 @@
+unix_socket_connect(hal_audio, thermal, thermal-engine)
+
+# allow communication w/perfd
+allow hal_audio perfd_data_file:dir search;
+allow hal_audio perfd_data_file:sock_file write;
+allow hal_audio perfd:unix_dgram_socket sendto;
+allow hal_audio perfd:unix_stream_socket connectto;