1allow hal_fingerprint_default fingerprint_device:chr_file rw_file_perms;
2allow hal_fingerprint_default tee_device:chr_file rw_file_perms;
3allow hal_fingerprint_default self:netlink_socket create_socket_perms_no_ioctl;
4allow hal_fingerprint_default dmabuf_system_heap_device:chr_file r_file_perms;
5
6allow hal_fingerprint_default fwk_stats_service:service_manager find;
7set_prop(hal_fingerprint_default, vendor_fingerprint_prop)
8add_hwservice(hal_fingerprint_default, hal_fingerprint_ext_hwservice)
9
10# allow fingerprint to access power hal
11hal_client_domain(hal_fingerprint_default, hal_power);
12
13# Allow access to the files of CDT information.
14r_dir_file(hal_fingerprint_default, sysfs_chosen)
15
16# Allow fingerprint to access calibration blk device.
17allow hal_fingerprint_default mfg_data_block_device:blk_file rw_file_perms;
18allow hal_fingerprint_default block_device:dir search;
19
20# Allow fingerprint to access fwk_sensor_hwservice
21allow hal_fingerprint_default fwk_sensor_hwservice:hwservice_manager find;
22
23# Allow fingerprint to access sysfs_display
24allow hal_fingerprint_default sysfs_display:file rw_file_perms;
25
26# Allow fingerprint to access trusty sysfs
27allow hal_fingerprint_default sysfs_trusty:file rw_file_perms;
28
29# Allow fingerprint to access display hal
30allow hal_fingerprint_default hal_pixel_display_service:service_manager find;
31binder_call(hal_fingerprint_default, hal_graphics_composer_default)
32
33# allow fingerprint to access thermal hal
34hal_client_domain(hal_fingerprint_default, hal_thermal);
35
36# allow fingerprint to read sysfs_leds
37allow hal_fingerprint_default sysfs_leds:file r_file_perms;
38allow hal_fingerprint_default sysfs_leds:dir r_dir_perms;
39
40# allow fingerprint to wakeup to trigger calibration scans and sleep after
41allow hal_fingerprint_default self:capability2 wake_alarm;
42allow hal_fingerprint_default self:capability2 block_suspend;
43
44# allow fingerprint to search for files
45# TODO: b/297562630 - remove unecessary permissions once not needed
46allow hal_fingerprint_default mnt_vendor_file:dir search;
47allow hal_fingerprint_default vendor_misc_data_file:dir search;
48allow hal_fingerprint_default persist_file:dir search;
49
50# allow fingerprint to rw config and calibration files in persist
51# TODO: b/297562630 - remove unecessary permissions once not needed
52allow hal_fingerprint_default persist_fingerprint_file:dir search;
53allow hal_fingerprint_default persist_fingerprint_file:file create_file_perms;
54
55# allow fingerprint to rw data files
56# TODO: b/297562630 - remove unecessary permissions once not needed
57allow hal_fingerprint_default vendor_fingerprint_data_file:dir create_dir_perms;
58allow hal_fingerprint_default vendor_fingerprint_data_file:file create_file_perms;
59