From 04a55ff3cadd47ed6c4968b233d32b0f0e71c540 Mon Sep 17 00:00:00 2001 From: xjl12 <1062256455@qq.com> Date: Tue, 14 Mar 2023 11:39:32 +0800 Subject: [PATCH] Remove system IFAAService for Face Authentication --- device.mk | 6 +----- sepolicy/private/appdomain.te | 11 +++++++++++ 2 files changed, 12 insertions(+), 5 deletions(-) diff --git a/device.mk b/device.mk index 64eda7f..446d769 100644 --- a/device.mk +++ b/device.mk @@ -296,11 +296,7 @@ PRODUCT_BOOT_JARS += \ mediatek-telecom-common \ mediatek-telephony-base \ mediatek-telephony-common - -# IFAA manager -PRODUCT_PACKAGES += \ - IFAAService - + # Keylayout PRODUCT_COPY_FILES += \ $(LOCAL_PATH)/configs/keylayout/mtk-kpd.kl:system/usr/keylayout/mtk-kpd.kl \ diff --git a/sepolicy/private/appdomain.te b/sepolicy/private/appdomain.te index 50a3fd8..9254e33 100644 --- a/sepolicy/private/appdomain.te +++ b/sepolicy/private/appdomain.te @@ -2,11 +2,22 @@ type teei_hal_wechat; type hal_mlipay_default, domain; type teei_hal_wechat_hwservice, hwservice_manager_type; type hal_mlipay_hwservice, hwservice_manager_type; +type sysfs_therm; allow appdomain teei_hal_wechat_hwservice:hwservice_manager { find }; allow appdomain hal_mlipay_hwservice:hwservice_manager { find }; +allow appdomain zygote:unix_stream_socket getopt; +allow appdomain input_device:dir search; +allow appdomain oem_unlock_prop:file read; +allow appdomain proc_tty_drivers:file read; +allow appdomain self:netlink_route_socket bind; +allow appdomain sysfs_net:dir search; +allow appdomain sysfs_therm:dir search; +allow appdomain unlabeled:filesystem getattr; +allow appdomain window_service:service_manager find; system_vendor_config_prop(vendor_payment_security_prop); system_vendor_config_prop(vendor_fp_prop); get_prop(appdomain, vendor_fp_prop); get_prop(appdomain, vendor_payment_security_prop); binder_call(appdomain, hal_mlipay_default); binder_call(appdomain, teei_hal_wechat); +