23 files changed, 207 insertions, 38 deletions

diff --git a/sepolicy/tvserver.te b/sepolicy/tvserver.te
new file mode 100644
index 0000000..94ce62c
--- a/dev/null
+++ b/sepolicy/tvserver.te
@@ -0,0 +1,48 @@
+type tvserver, domain;
+type tvserver_exec, exec_type, vendor_file_type, file_type;
+
+init_daemon_domain(tvserver)
+
+allow tvserver vndbinder_device:chr_file { read write open ioctl };
+allow tvserver vndservicemanager:binder { call transfer };
+
+allow tvserver hwservicemanager:binder { call transfer };
+allow tvserver { tvserver_hwservice  hidl_base_hwservice }:hwservice_manager { add };
+
+allow tvserver hwservicemanager_prop:file { open read getattr };
+
+allow tvserver { hal_tv_input_default system_app }:binder { call transfer };
+
+
+allow tvserver { video_device dvb_video_device amvideo_device mediactl_video_device }:chr_file  { read write open ioctl getattr };
+allow tvserver { hdmirx0_device avin_device }:chr_file  { read write open ioctl getattr };
+
+allow tvserver audio_device:dir { search };
+allow tvserver audio_device:chr_file { read write open ioctl };
+
+get_prop(tvserver, media_prop)
+get_prop(tvserver, tv_prop)
+set_prop(tvserver, tv_prop)
+set_prop(tvserver, tv_config_prop)
+allow tvserver tv_prop:file { read open getattr };
+
+allow tvserver proc:file { read write open ioctl getattr };
+
+allow tvserver param_tv_file:dir  { search read write open add_name remove_name rmdir };
+allow tvserver param_tv_file:file { create open read write setattr getattr lock unlink ioctl };
+allow param_tv_file labeledfs:filesystem { associate };
+
+allow tvserver { vendor_shell_exec vendor_toolbox_exec vendor_file }:file execute_no_trans;
+
+allow tvserver { system_control }:binder { call transfer };
+
+#allow tvserver hal_allocator_default:fd { use };
+allow tvserver { sysfs_cec sysfs_video sysfs_audio sysfs_lcd sysfs_rdma sysfs_di sysfs_am_vecm }:file { read write open getattr };
+
+allow tvserver sysfs_display_mode:file { read open getattr };
+
+allow tvserver system_file:dir { open };
+allow tvserver { sysfs_video sysfs_cec sysfs_di sysfs_am_vecm }:dir { search write add_name };
+
+allow tvserver systemcontrol_hwservice:hwservice_manager { find };
+