NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS04449311] SEPlolicy: for app to access ged by ioctlcmd

Browse Source 
[Detail]
For Andorid Q, there is a more stringent restriction for ioctl,
app need some permissions to access proc_ged by ioctlcmd.

[Solution]
Add sepolicy for app to access proc_ged by
ioctlcmd=GED_BRIDGE_IO_BOOST_GPU_FREQ.

MTK-Commit-Id: 1d7bd0172f33336abcc94349978bbbd008f5fe9d

Change-Id: I62f422f072dc0881ea4c9f082a4c548b7164d58d
CR-Id: ALPS04449311
Feature: Power Management
This commit is contained in:
Shanshan Guo 2020-01-18 10:12:25 +08:00
parent 4973f6afc9
commit 552d39bdd1
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
non_plat/app.te
View File

@ -6,13 +6,14 @@
# Purpose: Allow to access ged for gralloc_extra functions # Purpose: Allow to access ged for gralloc_extra functions
allow appdomain proc_ged:file rw_file_perms; allow appdomain proc_ged:file rw_file_perms;
allowxperm appdomain proc_ged:file ioctl { allowxperm appdomain proc_ged:file ioctl {
GED_BRIDGE_IO_GE_ALLOC
GED_BRIDGE_IO_LOG_BUF_GET GED_BRIDGE_IO_LOG_BUF_GET
GED_BRIDGE_IO_GE_GET GED_BRIDGE_IO_LOG_BUF_WRITE
GED_BRIDGE_IO_GE_SET GED_BRIDGE_IO_BOOST_GPU_FREQ
GED_BRIDGE_IO_MONITOR_3D_FENCE GED_BRIDGE_IO_MONITOR_3D_FENCE
GED_BRIDGE_IO_QUERY_INFO GED_BRIDGE_IO_QUERY_INFO
GED_BRIDGE_IO_LOG_BUF_WRITE GED_BRIDGE_IO_GE_ALLOC
GED_BRIDGE_IO_GE_GET
GED_BRIDGE_IO_GE_SET
}; };
# Date : W16.42 # Date : W16.42