| Alex Klyubin | ac2b4cd | 2017-02-13 14:40:49 -0800 | [diff] [blame] | 1 | # HwBinder IPC from client to server, and callbacks |
| 2 | binder_call(hal_audio_client, hal_audio_server) |
| 3 | binder_call(hal_audio_server, hal_audio_client) |
| 4 | |
| Steven Moreland | 9234e00 | 2018-06-06 09:30:18 -0700 | [diff] [blame] | 5 | hal_attribute_hwservice(hal_audio, hal_audio_hwservice) |
| Ytai Ben-Tsvi | 9eaf3be | 2021-03-22 13:00:38 -0700 | [diff] [blame^] | 6 | hal_attribute_service(hal_audio, hal_audio_service) |
| Alex Klyubin | 53656c1 | 2017-04-13 19:05:27 -0700 | [diff] [blame] | 7 | |
| Jeff Vander Stoep | 27ae545 | 2016-10-25 12:42:39 -0700 | [diff] [blame] | 8 | allow hal_audio ion_device:chr_file r_file_perms; |
| 9 | |
| Mikhail Naganov | 8048385 | 2017-10-18 20:28:33 +0000 | [diff] [blame] | 10 | r_dir_file(hal_audio, proc) |
| Tri Vo | 464f59a | 2017-10-06 10:20:53 -0700 | [diff] [blame] | 11 | r_dir_file(hal_audio, proc_asound) |
| Sunny Kapdi | bc0c88f | 2017-10-30 12:58:20 -0700 | [diff] [blame] | 12 | allow hal_audio_server audio_device:dir r_dir_perms; |
| 13 | allow hal_audio_server audio_device:chr_file rw_file_perms; |
| Jeff Vander Stoep | 27ae545 | 2016-10-25 12:42:39 -0700 | [diff] [blame] | 14 | |
| Mikhail Naganov | d7c88dd | 2017-03-09 14:32:16 -0800 | [diff] [blame] | 15 | # Needed to provide debug dump output via dumpsys' pipes. |
| 16 | allow hal_audio shell:fd use; |
| 17 | allow hal_audio shell:fifo_file write; |
| Mikhail Naganov | 9686cbc | 2017-05-04 13:25:52 -0700 | [diff] [blame] | 18 | allow hal_audio dumpstate:fd use; |
| 19 | allow hal_audio dumpstate:fifo_file write; |
| Mikhail Naganov | d7c88dd | 2017-03-09 14:32:16 -0800 | [diff] [blame] | 20 | |
| Ytai Ben-Tsvi | d09bf56 | 2020-03-26 16:00:51 -0700 | [diff] [blame] | 21 | # Needed to allow sound trigger hal to access shared memory from apps. |
| 22 | allow hal_audio_server appdomain:fd use; |
| 23 | |
| Haynes Mathew George | ebc7b43 | 2018-02-27 16:21:27 -0800 | [diff] [blame] | 24 | # allow hal audio to use vnbinder |
| 25 | vndbinder_use(hal_audio) |
| 26 | |
| Jeff Vander Stoep | 27ae545 | 2016-10-25 12:42:39 -0700 | [diff] [blame] | 27 | ### |
| 28 | ### neverallow rules |
| 29 | ### |
| 30 | |
| Alex Klyubin | ac2b4cd | 2017-02-13 14:40:49 -0800 | [diff] [blame] | 31 | # Should never execute any executable without a domain transition |
| Jeff Vander Stoep | 6a28b68 | 2017-11-20 21:43:25 -0800 | [diff] [blame] | 32 | neverallow hal_audio_server { file_type fs_type }:file execute_no_trans; |
| Jeff Vander Stoep | 27ae545 | 2016-10-25 12:42:39 -0700 | [diff] [blame] | 33 | |
| Jeff Vander Stoep | 7fa59c8 | 2017-03-13 22:03:10 -0700 | [diff] [blame] | 34 | # Only audio HAL may directly access the audio hardware |
| Vignesh Kulothungan | 155ca12 | 2019-03-18 17:21:17 -0700 | [diff] [blame] | 35 | neverallow { halserverdomain -hal_audio_server -hal_omx_server } audio_device:chr_file *; |
| Jaekyun Seok | 224921d | 2018-04-09 12:07:32 +0900 | [diff] [blame] | 36 | |
| Inseob Kim | ebde47c | 2020-06-23 23:52:55 +0900 | [diff] [blame] | 37 | get_prop(hal_audio, audio_config_prop) |
| Jaekyun Seok | 224921d | 2018-04-09 12:07:32 +0900 | [diff] [blame] | 38 | get_prop(hal_audio, bluetooth_a2dp_offload_prop) |
| Cheney Ni | e55a74b | 2019-03-18 11:07:32 +0800 | [diff] [blame] | 39 | get_prop(hal_audio, bluetooth_audio_hal_prop) |