android_device_mediatek_sep.../non_plat/hal_graphics_allocator.te

# Date : WK17.13
# Operation : Add sepolicy
# Purpose : Add policy for gralloc HIDL

allow hal_graphics_allocator proc_ged:file { read ioctl open };

allowxperm hal_graphics_allocator_default proc_ged:file ioctl { GED_BRIDGE_IO_GE_ALLOC GED_BRIDGE_IO_GE_GET };
import from mediatek/master to mediatek/alps-mp-o1.mp1 Change-Id: Ic78db8195c5c51f85c9c6fd3ef8333489afd6e79 MTK-Commit-Id: 848bf57127be9d01fd1df4aab95737855456afee 2020-01-18 09:29:32 +08:00			`# Date : WK17.13`
			`# Operation : Add sepolicy`
			`# Purpose : Add policy for gralloc HIDL`

[ALPS04367884] Sepolicy: workaround for denied policy(2) [Detail] Set proc node specific node - hraphic_allocator - bootanim - aee_core_forwarder MTK-Commit-Id: 3a2620f6c38a355ad1fc22e570cc2bc119ab6d48 Change-Id: I4b0572c43b44c730b9cd368870c4ff0d79f6de8d CR-Id: ALPS04367884 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK 2020-01-18 10:09:22 +08:00			`allow hal_graphics_allocator proc_ged:file { read ioctl open };`

			`allowxperm hal_graphics_allocator_default proc_ged:file ioctl { GED_BRIDGE_IO_GE_ALLOC GED_BRIDGE_IO_GE_GET };`