Files
pawlet_rpi4/sepolicy/pawlet_androidauto_daemon.te
oxmc c57d1fab74 car: wire up PawletAndroidAuto + Widevine DRM HAL sepolicy/packages
M0 scaffold wiring for app_PawletAndroidAuto (native daemon + app) and the
Widevine L3 HAL: product packages, file_contexts, and a permissive
domain for pawlet.androidauto-daemon.
2026-08-15 00:41:26 -07:00

17 lines
855 B
Plaintext

# pawlet.androidauto-daemon — native Android Auto head-unit protocol engine
# (GPLv3, packages/apps/PawletAndroidAuto/native). Scoped domain rather than a
# stock system daemon type, since it will need raw USB host device access
# (AOAP/libusb) once the real protocol lands — mirrors the domain-isolation
# approach of hal_boot_control_pawlet_rpi.te, even though this isn't a real
# Treble HAL (no VINTF fragment, plain /system/bin daemon).
#
# M0: placeholder binary only (starts, logs, idles) — permissive, no device
# access rules yet. USB/AAudio/MediaCodec grants land alongside the
# milestones that need them (see PLAN.md in the app repo).
type pawlet_androidauto_daemon, domain;
type pawlet_androidauto_daemon_exec, exec_type, file_type, system_file_type;
init_daemon_domain(pawlet_androidauto_daemon)
permissive pawlet_androidauto_daemon;