From 78c0805ac81cc6102b08019b23eff3760cb9bf7c Mon Sep 17 00:00:00 2001
From: Dhina17 <dhinalogu@gmail.com>
Date: Thu, 19 Mar 2020 10:13:21 +0530
Subject: [PATCH] onclite: sepolicy: Allow fingerprint hal to read sysfs_fpc
dir properly
* r_dir_perms - { open getattr read search ioctl }
Signed-off-by: Dhina17 <dhinalogu@gmail.com>
---
sepolicy/hal_fingerprint_default.te | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/sepolicy/hal_fingerprint_default.te b/sepolicy/hal_fingerprint_default.te
index 560da0f..7db00a5 100644
--- a/sepolicy/hal_fingerprint_default.te
+++ b/sepolicy/hal_fingerprint_default.te
@@ -8,7 +8,7 @@ allow hal_fingerprint_default hal_perf_hwservice:hwservice_manager find;
allow hal_fingerprint_default mnt_user_file:dir {search};
allow hal_fingerprint_default mnt_user_file:lnk_file {read};
-allow hal_fingerprint_default sysfs_fpc:dir {search};
+allow hal_fingerprint_default sysfs_fpc:dir r_dir_perms;
allow hal_fingerprint_default sysfs_fpc:file {ioctl open read write};
allow hal_fingerprint_default tee_device:chr_file {ioctl open read write};
--
GitLab