Merge "sepolicy: Add sepolicy to access memory devices"
This commit is contained in:
commit
8623ca7aa1
1 changed files with 4 additions and 0 deletions
|
@ -67,6 +67,10 @@ allow hal_graphics_composer_default vendor_dmabuf_system_heap_device:chr_file r_
|
|||
# whitelist the ioctl cmd that can be sent from hal_graphics_composer_default
|
||||
allowxperm hal_graphics_composer_default vendor_dmabuf_system_heap_device:chr_file ioctl DMA_HEAP_IOCTL_ALLOC;
|
||||
|
||||
# Allow hal_graphics_composer_default to open/read vendor_membuf and vendor_vm_trusted device
|
||||
allow hal_graphics_composer_default vendor_membuf_dev:chr_file r_file_perms;
|
||||
allow hal_graphics_composer_default vendor_vm_trusted_device:chr_file r_file_perms;
|
||||
|
||||
# Access /sys/devices/virtual/graphics/fb0
|
||||
r_dir_file(hal_graphics_composer_default, sysfs_type)
|
||||
|
||||
|
|
Loading…
Reference in a new issue