From 552d39bdd1504d3ec4b8be4d76e1eb9247d1f5de Mon Sep 17 00:00:00 2001
From: Shanshan Guo <Shanshan.Guo@mediatek.com>
Date: Sat, 18 Jan 2020 10:12:25 +0800
Subject: [PATCH] [ALPS04449311] SEPlolicy: for app to access ged by ioctlcmd

[Detail]
For Andorid Q, there is a more stringent restriction for ioctl,
app need some permissions to access proc_ged by ioctlcmd.

[Solution]
Add sepolicy for app to access proc_ged by
ioctlcmd=GED_BRIDGE_IO_BOOST_GPU_FREQ.

MTK-Commit-Id: 1d7bd0172f33336abcc94349978bbbd008f5fe9d

Change-Id: I62f422f072dc0881ea4c9f082a4c548b7164d58d
CR-Id: ALPS04449311
Feature: Power Management
---
 non_plat/app.te | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/non_plat/app.te b/non_plat/app.te
index a3b2195..6c14f45 100644
--- a/non_plat/app.te
+++ b/non_plat/app.te
@@ -6,13 +6,14 @@
 # Purpose: Allow to access ged for gralloc_extra functions
 allow appdomain proc_ged:file rw_file_perms;
 allowxperm appdomain proc_ged:file ioctl {
- GED_BRIDGE_IO_GE_ALLOC
  GED_BRIDGE_IO_LOG_BUF_GET
- GED_BRIDGE_IO_GE_GET
- GED_BRIDGE_IO_GE_SET
+ GED_BRIDGE_IO_LOG_BUF_WRITE
+ GED_BRIDGE_IO_BOOST_GPU_FREQ
  GED_BRIDGE_IO_MONITOR_3D_FENCE
  GED_BRIDGE_IO_QUERY_INFO
- GED_BRIDGE_IO_LOG_BUF_WRITE
+ GED_BRIDGE_IO_GE_ALLOC
+ GED_BRIDGE_IO_GE_GET
+ GED_BRIDGE_IO_GE_SET
  };
 
 # Date : W16.42