NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
android_device_mediatek_sep.../non_plat/surfaceflinger.te

106 lines
3.1 KiB
Plaintext
Raw Normal View History

import from mediatek/master to mediatek/alps-mp-o1.mp1 Change-Id: Ic78db8195c5c51f85c9c6fd3ef8333489afd6e79 MTK-Commit-Id: 848bf57127be9d01fd1df4aab95737855456afee
2020-01-18 09:29:32 +08:00
# ==============================================
# MTK Policy Rule
# ============
# Data : WK14.42
# Operation : Migration
# Purpose : Video playback
allow surfaceflinger sw_sync_device:chr_file { rw_file_perms };
allow surfaceflinger debug_prop:property_service set;
# Date : WK16.33
# Purpose: Allow to access ged for gralloc_extra functions
[ALPS04654012] SurfaceFlinger: update proc_ged sepolicy Update the sepolicy for surfaceflinger proc_ged ioctl. MTK-Commit-Id: 61dc5b4a1d4886d3a53879e4db927ec7f115b3b5 Change-Id: I1479e29fa864c44e8ed3850a650511ca4ba52602 CR-Id: ALPS04654012 Feature: [Module]SurfaceFlinger/HWComposer
2020-01-18 10:15:23 +08:00
allow surfaceflinger proc_ged:file rw_file_perms;
import from mediatek/master to mediatek/alps-mp-o1.mp1 Change-Id: Ic78db8195c5c51f85c9c6fd3ef8333489afd6e79 MTK-Commit-Id: 848bf57127be9d01fd1df4aab95737855456afee
2020-01-18 09:29:32 +08:00
# Date : W16.42
# Operation : Integration
# Purpose : DRM / DRI GPU driver required
allow surfaceflinger gpu_device:dir search;
# Date : WK17.12
# Purpose: Fix bootup fail
[ALPS03869840] Modify for SELinux violation [Detail] Because p has new SELinux policy, we need to fix the violation part. [Solution] Mark the violation part. MTK-Commit-Id: 9935b37d96538a2696ac34e0ef8e0f4c480d3167 Change-Id: Ia0fac8c2b94d2acfc29dec20dd29dca85f9f9cf0 CR-Id: ALPS03869840 Feature: [Module]SurfaceFlinger/HWComposer
2020-01-18 09:43:36 +08:00
allow surfaceflinger proc_bootprof:file r_file_perms;
import from mediatek/master to mediatek/alps-mp-o1.mp1 Change-Id: Ic78db8195c5c51f85c9c6fd3ef8333489afd6e79 MTK-Commit-Id: 848bf57127be9d01fd1df4aab95737855456afee
2020-01-18 09:29:32 +08:00
#============= surfaceflinger ==============
allow surfaceflinger debugfs_ion:dir search;
# Date : WK17.30
# Operation : O Migration
# Purpose: Allow to access cmdq driver
allow surfaceflinger mtk_cmdq_device:chr_file { read ioctl open };
# Date : W17.39
# Perform Binder IPC.
binder_use(surfaceflinger)
binder_call(surfaceflinger, binderservicedomain)
binder_call(surfaceflinger, appdomain)
binder_call(surfaceflinger, mtkbootanimation)
binder_service(surfaceflinger)
allow surfaceflinger mtkbootanimation:dir search;
allow surfaceflinger mtkbootanimation:file { read getattr open };
# Date : W17.43
# Operation : Migration
# Purpose: Allow to access perfmgr
allow surfaceflinger proc_perfmgr:dir {read search};
[ALPS03825066] Mark file context to fix build fails Restore the policies accessing files labeled as proc_xxx or sysfs_xxx, but there are some exceptions for coredomain process, such as meta_tst,dump_state,kpoc_charger MTK-Commit-Id: 7953b5203bb3cac099c3326d330643b4cd73746d Change-Id: I4b16c09c352891783e837bea370c264966ca6d13 CR-Id: ALPS03825066 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 09:29:41 +08:00
allow surfaceflinger proc_perfmgr:file {open read ioctl};
[ALPS04331194] FPSGO: add ioctl permission [Detail] add FPSGO ioctl permission MTK-Commit-Id: 4466c4e3c548c134be6939fa50e4c8d3f37a257a Change-Id: I0c10abd0e780f764ff423442ea3d1b6ed66177c6 CR-Id: ALPS04331194 Feature: FPSGO
2020-01-18 10:09:36 +08:00
allowxperm surfaceflinger proc_perfmgr:file ioctl {
[ALPS04328846] power: refine sepolicy [Detail] 1. Add prefix PERFMGR for performance related ioctl 2. Add property permission for PowerHAL MTK-Commit-Id: 91ef99a47ee2de3c48426298c9a67d5e4dd10a6b Change-Id: I5979aefc7fb110ee540425bc53896babdcac08bd CR-Id: ALPS04328846 Feature: [Module]PowerHAL
2020-01-18 10:13:32 +08:00
PERFMGR_FPSGO_QUEUE
PERFMGR_FPSGO_DEQUEUE
PERFMGR_FPSGO_QUEUE_CONNECT
PERFMGR_FPSGO_BQID
PERFMGR_FPSGO_VSYNC
[ALPS04331194] FPSGO: add ioctl permission [Detail] add FPSGO ioctl permission MTK-Commit-Id: 4466c4e3c548c134be6939fa50e4c8d3f37a257a Change-Id: I0c10abd0e780f764ff423442ea3d1b6ed66177c6 CR-Id: ALPS04331194 Feature: FPSGO
2020-01-18 10:09:36 +08:00
};
import from mediatek/master to mediatek/alps-mp-o1.mp1 Change-Id: Ic78db8195c5c51f85c9c6fd3ef8333489afd6e79 MTK-Commit-Id: 848bf57127be9d01fd1df4aab95737855456afee
2020-01-18 09:29:32 +08:00
# Date : WK17.43
# Operation : Debug
# Purpose: Allow to dump HWC backtrace
get_prop(surfaceflinger, graphics_hwc_pid_prop)
[ALPS04034495] Latch unsignaled buffer [Detail] Read latch unsignaled buffer by vendor property. [Solution] Read latch unsignaled buffer by vendor property. MTK-Commit-Id: 62e601385bce5a890d9d46ce81318e4d5c19e643 Change-Id: I5737f589a3d3bb48ad5a30ee2ef670de602b30c3 CR-Id: ALPS04034495 Feature: [Module]SurfaceFlinger/HWComposer
2020-01-18 10:05:54 +08:00
get_prop(surfaceflinger, graphics_hwc_latch_unsignaled_prop)
import from mediatek/master to mediatek/alps-mp-o1.mp1 Change-Id: Ic78db8195c5c51f85c9c6fd3ef8333489afd6e79 MTK-Commit-Id: 848bf57127be9d01fd1df4aab95737855456afee
2020-01-18 09:29:32 +08:00
allow surfaceflinger hal_graphics_composer_default:dir search;
allow surfaceflinger hal_graphics_composer_default:lnk_file read;
[ALPS04099835] Modify for SF access prop [Detail] Because SF cant access get debug_bq_dump_prop, we add the authority for SF to access it. MTK-Commit-Id: ab026c0d236e280404e58d1b2f1fbeac188e3f2b Change-Id: I6bd7bbf0b562f81ae219036adfb12847ea14ff6b CR-Id: ALPS04099835 Feature: [Module]SurfaceFlinger/HWComposer
2020-01-18 10:07:14 +08:00
# Date : WK18.36
# Operation : Debug
# Purpose: Allow to dump buffer queue
get_prop(surfaceflinger, debug_bq_dump_prop)
[ALPS04357449] Sepolicy: workaround for denied policy [Detail] Set proc node specific node - hraphic_composer - bootanimation - aee_core_forwarder - surfaceflinger MTK-Commit-Id: 46901e2900a497c472b8a7c01f1350bdd28bbdae Change-Id: I89a1ab578a2841d3a16718153d5a716ad45c399b CR-Id: ALPS04357449 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 10:09:09 +08:00
allowxperm surfaceflinger proc_perfmgr:file ioctl {GED_BRIDGE_IO_LOG_BUF_GET GED_BRIDGE_IO_BOOST_GPU_FREQ GED_BRIDGE_IO_QUERY_INFO};
[ALPS04384473] Add needed sepolicy [Detail] SurfaceFlinger need to add sepolicy to do ioctl with ged node [Solution] Add SurfaceFlinger sepolicy MTK-Commit-Id: 8f848c40c9443a959fe564875aa5046458219ae5 Change-Id: Id88cd8d31f66bbdcb7df6e48127e789d341772ac CR-Id: ALPS04384473 Feature: [Module]SurfaceFlinger/HWComposer
2020-01-18 10:10:36 +08:00
allowxperm surfaceflinger proc_ged:file ioctl {
[ALPS04654012] SurfaceFlinger: update proc_ged sepolicy Update the sepolicy for surfaceflinger proc_ged ioctl. MTK-Commit-Id: 61dc5b4a1d4886d3a53879e4db927ec7f115b3b5 Change-Id: I1479e29fa864c44e8ed3850a650511ca4ba52602 CR-Id: ALPS04654012 Feature: [Module]SurfaceFlinger/HWComposer
2020-01-18 10:15:23 +08:00
  GED_BRIDGE_IO_LOG_BUF_GET
  GED_BRIDGE_IO_BOOST_GPU_FREQ
  GED_BRIDGE_IO_QUERY_INFO
  GED_BRIDGE_IO_GE_GET
  GED_BRIDGE_IO_LOG_BUF_WRITE
  GED_BRIDGE_IO_GE_SET
  GED_BRIDGE_IO_GE_ALLOC
  GED_BRIDGE_IO_GE_INFO
GED_BRIDGE_IO_IOCTLCMD_0F
GED_BRIDGE_IO_IOCTLCMD_10
  GED_BRIDGE_IO_MONITOR_3D_FENCE
  GED_BRIDGE_IO_NOTIFY_VSYNC
  GED_BRIDGE_IO_DVFS_PROBE
  GED_BRIDGE_IO_DVFS_UM_RETURN
  GED_BRIDGE_IO_EVENT_NOTIFY
  GED_BRIDGE_IO_WAIT_HW_VSYNC
  GED_BRIDGE_IO_QUERY_TARGET_FPS
  GED_BRIDGE_IO_VSYNC_WAIT
  GED_BRIDGE_IO_GPU_HINT_TO_CPU
  GED_BRIDGE_IO_LOG_BUF_RESET
  GED_BRIDGE_IO_GPU_TIMESTAMP
  GED_BRIDGE_IO_TARGET_FPS
  GED_BRIDGE_IO_GPU_TUNER_STATUS
[ALPS04384473] Add needed sepolicy [Detail] SurfaceFlinger need to add sepolicy to do ioctl with ged node [Solution] Add SurfaceFlinger sepolicy MTK-Commit-Id: 8f848c40c9443a959fe564875aa5046458219ae5 Change-Id: Id88cd8d31f66bbdcb7df6e48127e789d341772ac CR-Id: ALPS04384473 Feature: [Module]SurfaceFlinger/HWComposer
2020-01-18 10:10:36 +08:00
};
[ALPS04382560] MDP: open mdp device fail [Detail] 1. Change /proc/mdp/device to /dev/mdp_device 2. Modify kernel driver change device node 3. Modify init.rc change device owner 4. Add selinux policy MTK-Commit-Id: 08cf6d6ee97647a5f1262f475b79b420b616e527 Change-Id: I2bd7ee983116294dd62f247a9d30a67655316bd8 CR-Id: ALPS04382560 Feature: [Module]MDP Driver
2020-01-18 10:12:32 +08:00
# Date : WK19.4
# Operation : P Migration
# Purpose: Allow to access /dev/mdp_device driver
allow surfaceflinger mdp_device:chr_file rw_file_perms;
# Date : WK19.09
# Purpose: Allow to access property dev/mdp_sync
#============= surfaceflinger ==============
allow surfaceflinger mtk_mdp_device:chr_file rw_file_perms;
Reference in New Issue Copy Permalink