| Tri Vo | a532088 | 2019-02-26 16:45:40 -0800 | [diff] [blame] | 1 | type system_suspend, domain, coredomain, system_suspend_server; |
| 2 | |
| 3 | type system_suspend_exec, system_file_type, exec_type, file_type; |
| 4 | init_daemon_domain(system_suspend) |
| 5 | |
| Michael Sun | 6445f19 | 2020-11-02 23:54:21 +0000 | [diff] [blame^] | 6 | # To serve ISuspendControlService and ISuspendControlServiceInternal. |
| Tri Vo | a532088 | 2019-02-26 16:45:40 -0800 | [diff] [blame] | 7 | binder_use(system_suspend) |
| Michael Sun | 6445f19 | 2020-11-02 23:54:21 +0000 | [diff] [blame^] | 8 | add_service(system_suspend, system_suspend_control_internal_service) |
| Tri Vo | a532088 | 2019-02-26 16:45:40 -0800 | [diff] [blame] | 9 | add_service(system_suspend, system_suspend_control_service) |
| 10 | |
| 11 | # Access to /sys/power/{ wakeup_count, state } suspend interface. |
| 12 | allow system_suspend sysfs_power:file rw_file_perms; |
| Tri Vo | 131fa73 | 2019-02-07 13:29:39 -0800 | [diff] [blame] | 13 | |
| Michael Sun | 9cb662b | 2020-10-16 07:22:44 +0000 | [diff] [blame] | 14 | # Access to wakeup, suspend stats, and wakeup reasons. |
| Tri Vo | 5f1ac02 | 2019-11-07 13:37:34 -0800 | [diff] [blame] | 15 | r_dir_file(system_suspend, sysfs_suspend_stats) |
| 16 | r_dir_file(system_suspend, sysfs_wakeup) |
| Michael Sun | 9cb662b | 2020-10-16 07:22:44 +0000 | [diff] [blame] | 17 | r_dir_file(system_suspend, sysfs_wakeup_reasons) |
| Tri Vo | e3e77ed | 2019-11-12 13:37:03 -0800 | [diff] [blame] | 18 | # To resolve arbitrary sysfs paths from /sys/class/wakeup/* symlinks. |
| 19 | allow system_suspend sysfs_type:dir search; |
| Tri Vo | 5f1ac02 | 2019-11-07 13:37:34 -0800 | [diff] [blame] | 20 | |
| Michael Sun | 666992e | 2020-10-14 19:49:20 +0000 | [diff] [blame] | 21 | # To call BTAA registered callbacks |
| 22 | allow system_suspend bluetooth:binder call; |
| 23 | |
| Tri Vo | 131fa73 | 2019-02-07 13:29:39 -0800 | [diff] [blame] | 24 | neverallow { |
| 25 | domain |
| 26 | -atrace # tracing |
| Michael Sun | 6445f19 | 2020-11-02 23:54:21 +0000 | [diff] [blame^] | 27 | -dumpstate # bug reports |
| 28 | -system_suspend # implements system_suspend_control_internal_service |
| 29 | -system_server # configures system_suspend via ISuspendControlServiceInternal |
| 30 | -traceur_app # tracing |
| 31 | } system_suspend_control_internal_service:service_manager find; |
| 32 | |
| 33 | neverallow { |
| 34 | domain |
| 35 | -atrace # tracing |
| Michael Sun | df54a52 | 2020-10-14 00:31:01 +0000 | [diff] [blame] | 36 | -bluetooth # support Bluetooth activity attribution (BTAA) |
| Tri Vo | 131fa73 | 2019-02-07 13:29:39 -0800 | [diff] [blame] | 37 | -dumpstate # bug reports |
| 38 | -system_suspend # implements system_suspend_control_service |
| 39 | -system_server # configures system_suspend via ISuspendControlService |
| 40 | -traceur_app # tracing |
| 41 | } system_suspend_control_service:service_manager find; |