Files
pawlet_rpi4/sepolicy/file_contexts
oxmc 05ee592f41 car: wire up PawletAndroidAuto + Widevine DRM HAL sepolicy/packages
M0 scaffold wiring for app_PawletAndroidAuto (native daemon + app) and the
Widevine L3 HAL: product packages, file_contexts, and a permissive
domain for pawlet.androidauto-daemon.
2026-08-15 00:59:46 -07:00

62 lines
2.7 KiB
Plaintext

# CEC
/dev/cec0 u:object_r:cec_device:s0
/dev/cec1 u:object_r:cec_device:s0
# DRM
/data/vendor/mediadrm(/.*)? u:object_r:mediadrm_vendor_data_file:s0
# Camera — V4L2 media controller and video devices
/dev/media[0-9]+ u:object_r:video_device:s0
/dev/video[0-9]+ u:object_r:video_device:s0
# Graphics
/dev/dri(/.*)? u:object_r:gpu_device:s0
# Boot control HAL binary
/vendor/bin/hw/android\.hardware\.boot-service\.pawlet_rpi u:object_r:hal_boot_control_pawlet_rpi_exec:s0
# Widevine DRM HAL binary
/vendor/bin/hw/android\.hardware\.drm-service\.pawlet_widevine u:object_r:hal_drm_widevine_exec:s0
# Android Auto head-unit daemon binary
/system/bin/pawlet\.androidauto-daemon u:object_r:pawlet_androidauto_daemon_exec:s0
# Partitions — 9-partition A/B layout:
# p1=boot_a p2=boot_b p3=recovery p4=misc p5=system
# p6=system_ext p7=vendor p8=metadata p9=userdata
/dev/block/mmcblk0p1 u:object_r:boot_block_device:s0
/dev/block/mmcblk0p2 u:object_r:boot_block_device:s0
/dev/block/mmcblk0p4 u:object_r:misc_block_device:s0
/dev/block/mmcblk0p5 u:object_r:system_block_device:s0
/dev/block/mmcblk0p6 u:object_r:system_block_device:s0
/dev/block/mmcblk0p7 u:object_r:system_block_device:s0
/dev/block/mmcblk0p8 u:object_r:metadata_block_device:s0
/dev/block/mmcblk0p9 u:object_r:userdata_block_device:s0
/dev/block/nvme0n1p1 u:object_r:boot_block_device:s0
/dev/block/nvme0n1p2 u:object_r:boot_block_device:s0
/dev/block/nvme0n1p4 u:object_r:misc_block_device:s0
/dev/block/nvme0n1p5 u:object_r:system_block_device:s0
/dev/block/nvme0n1p6 u:object_r:system_block_device:s0
/dev/block/nvme0n1p7 u:object_r:system_block_device:s0
/dev/block/nvme0n1p8 u:object_r:metadata_block_device:s0
/dev/block/nvme0n1p9 u:object_r:userdata_block_device:s0
/dev/block/sda1 u:object_r:boot_block_device:s0
/dev/block/sda2 u:object_r:boot_block_device:s0
/dev/block/sda4 u:object_r:misc_block_device:s0
/dev/block/sda5 u:object_r:system_block_device:s0
/dev/block/sda6 u:object_r:system_block_device:s0
/dev/block/sda7 u:object_r:system_block_device:s0
/dev/block/sda8 u:object_r:metadata_block_device:s0
/dev/block/sda9 u:object_r:userdata_block_device:s0
/dev/block/sdb1 u:object_r:boot_block_device:s0
/dev/block/sdb2 u:object_r:boot_block_device:s0
/dev/block/sdb4 u:object_r:misc_block_device:s0
/dev/block/sdb5 u:object_r:system_block_device:s0
/dev/block/sdb6 u:object_r:system_block_device:s0
/dev/block/sdb7 u:object_r:system_block_device:s0
/dev/block/sdb8 u:object_r:metadata_block_device:s0
/dev/block/sdb9 u:object_r:userdata_block_device:s0
# reboot-to-recovery chain-loader (vendor/pawlet/recoveryboot)
/vendor/bin/pawlet-recoveryboot\.sh u:object_r:vendor_misc_writer_exec:s0