commit 09a026c9c7b28db878ba79158700075156a85066
author Jeff Pu <jeffpu@google.com> Tue Sep 17 16:47:51 2024 +0000
committer Jeff Pu <jeffpu@google.com> Tue Sep 17 19:46:33 2024 +0000
tree 27d22107709cebf4246d11f99c7851aa670c20c9
parent 3e5e1613a2f2ab2a413dc21274f707599fff564e

Add sepolicy for biometric face virtual hal

Bug: 326227403
Test: atest CtsBiometricTestCases
Change-Id: I24559117b133628fa83ee1a2f58e616be6fdf6eb

apex/Android.bp

diff --git a/apex/Android.bp b/apex/Android.bp
index 4daff80..a6d0853 100644
--- a/apex/Android.bp
+++ b/apex/Android.bp
@@ -307,3 +307,10 @@
         "com.android.uprobestats-file_contexts",
     ],
 }
+
+filegroup {
+    name: "com.android.biometrics.virtual.face-file_contexts",
+    srcs: [
+        "com.android.biometrics.virtual.face-file_contexts",
+    ],
+}

apex/com.android.biometrics.virtual.face-file_contexts

diff --git a/apex/com.android.biometrics.virtual.face-file_contexts b/apex/com.android.biometrics.virtual.face-file_contexts
new file mode 100644
index 0000000..07fc0a8
--- /dev/null
+++ b/apex/com.android.biometrics.virtual.face-file_contexts
@@ -0,0 +1,3 @@
+(/.*)?                                          u:object_r:vendor_file:s0
+/etc(/.*)?                                      u:object_r:vendor_configs_file:s0
+/bin/hw/android\.hardware\.biometrics\.face-service\.example u:object_r:virtual_face_exec:s0