Merge "sepolicy: Add sepolicy to access memory devices"

This commit is contained in:
qctecmdr 2021-07-26 16:11:48 -07:00 committed by Gerrit - the friendly Code Review server
commit 8623ca7aa1

View file

@ -67,6 +67,10 @@ allow hal_graphics_composer_default vendor_dmabuf_system_heap_device:chr_file r_
# whitelist the ioctl cmd that can be sent from hal_graphics_composer_default
allowxperm hal_graphics_composer_default vendor_dmabuf_system_heap_device:chr_file ioctl DMA_HEAP_IOCTL_ALLOC;
# Allow hal_graphics_composer_default to open/read vendor_membuf and vendor_vm_trusted device
allow hal_graphics_composer_default vendor_membuf_dev:chr_file r_file_perms;
allow hal_graphics_composer_default vendor_vm_trusted_device:chr_file r_file_perms;
# Access /sys/devices/virtual/graphics/fb0
r_dir_file(hal_graphics_composer_default, sysfs_type)