platform_system_sepolicy/public/vr_wm.te
Nick Bray 08a3992020 Whitelist HAL FD for vr_window_manager.
A new API was added to gralloc that exposes this FD.

Bug: 32541196
Test: `m -j32` succeeds. Sailfish device boots.
Change-Id: I605e5ba826cdce1518e33649d3f787610db43aee
2017-03-01 19:14:10 -08:00

29 lines
768 B
Text

type vr_wm, domain;
type vr_wm_exec, exec_type, file_type;
binder_use(vr_wm)
binder_call(vr_wm, surfaceflinger)
binder_call(vr_wm, virtual_touchpad)
allow vr_wm virtual_touchpad_service:service_manager find;
binder_service(vr_wm)
add_service(vr_wm, vr_window_manager_service)
# Hosts the VR HWC implementation and provides a simple Binder interface for VR
# Window Manager to receive the layers/buffers.
hwbinder_use(vr_wm)
# Load vendor libraries.
allow vr_wm system_file:dir r_dir_perms;
allow vr_wm gpu_device:chr_file rw_file_perms;
allow vr_wm ion_device:chr_file r_file_perms;
# Get buffer metadata.
allow vr_wm hal_graphics_allocator:fd use;
use_pdx(vr_wm, bufferhubd)
use_pdx(vr_wm, sensord)
use_pdx(vr_wm, surfaceflinger)
use_pdx(vr_wm, performanced)