From 7ad3357d31219d15c5a0a453e17feb11f84d5e58 Mon Sep 17 00:00:00 2001
From: Kane Jhang <kane.jhang@mediatek.com>
Date: Sat, 18 Jan 2020 10:10:36 +0800
Subject: [PATCH] [ALPS04384473] Add needed sepolicy

[Detail] SurfaceFlinger need to add sepolicy to do ioctl with ged node

[Solution] Add SurfaceFlinger sepolicy

MTK-Commit-Id: 8f848c40c9443a959fe564875aa5046458219ae5

Change-Id: Id88cd8d31f66bbdcb7df6e48127e789d341772ac
CR-Id: ALPS04384473
Feature: [Module]SurfaceFlinger/HWComposer
---
 non_plat/surfaceflinger.te | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/non_plat/surfaceflinger.te b/non_plat/surfaceflinger.te
index 6f3bdf3..ff78250 100644
--- a/non_plat/surfaceflinger.te
+++ b/non_plat/surfaceflinger.te
@@ -68,4 +68,10 @@ allow surfaceflinger hal_graphics_composer_default:lnk_file read;
 get_prop(surfaceflinger, debug_bq_dump_prop)
 
 allowxperm surfaceflinger proc_perfmgr:file ioctl {GED_BRIDGE_IO_LOG_BUF_GET GED_BRIDGE_IO_BOOST_GPU_FREQ GED_BRIDGE_IO_QUERY_INFO};
-
+allowxperm surfaceflinger proc_ged:file ioctl {
+GED_BRIDGE_IO_LOG_BUF_GET
+GED_BRIDGE_IO_BOOST_GPU_FREQ
+GED_BRIDGE_IO_QUERY_INFO
+GED_BRIDGE_IO_GE_GET
+GED_BRIDGE_IO_LOG_BUF_WRITE
+};