NekoSakura/android_device_mediatek_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[ALPS03869840] Add selinux for graphic debug prop

Browse Source 
[Detail]
Relable vendor defined debug property for android P
and label the following property:
1. vendor.debug.sf
2. vendor.debug.hwc
3. vendor.debug.bq

MTK-Commit-Id: 597f4da4e53b1d45c556895e0d85bdb3c6cd80a1

Change-Id: Iaa311f9049a519bd891a45f2b2ca73a61861e353
CR-Id: ALPS03869840
Feature: [Module]SurfaceFlinger/HWComposer
This commit is contained in:
Ju-Yi Cheng 2020-01-18 09:51:06 +08:00 committed by Ju-Yi Cheng (鄭如意)
parent 39aae26920
commit 8f98a88a89
4 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
non_plat/hal_graphics_composer_default.te
View File

@ -44,8 +44,9 @@ binder_call(hal_graphics_composer_default, mtk_hal_power)
# Purpose: Allow to access property # Purpose: Allow to access property
set_prop(hal_graphics_composer_default, graphics_hwc_pid_prop) set_prop(hal_graphics_composer_default, graphics_hwc_pid_prop)
get_prop(hal_graphics_composer_default, graphics_hwc_pid_prop) get_prop(hal_graphics_composer_default, graphics_hwc_pid_prop)
get_prop(hal_graphics_composer_default, graphics_debug_prop)
# Date : WK18.03 # Date : WK18.03
# Purpose: Allow to access property dev/mdp_sync # Purpose: Allow to access property dev/mdp_sync
#============= hal_graphics_composer_default ============== #============= hal_graphics_composer_default ==============
allow hal_graphics_composer_default mtk_mdp_device:chr_file { read write open ioctl }; allow hal_graphics_composer_default mtk_mdp_device:chr_file { read write open ioctl };

1
non_plat/property.te
View File

@ -146,6 +146,7 @@ type mtk_thermal_config_prop, property_type;
#=============allow composer set property ============================ #=============allow composer set property ============================
type graphics_hwc_pid_prop, property_type; type graphics_hwc_pid_prop, property_type;
type graphics_debug_prop, property_type;
#============= mtkcam property ============================ #============= mtkcam property ============================
type mtkcam_prop, property_type; type mtkcam_prop, property_type;

7
non_plat/property_contexts
View File

@ -154,7 +154,12 @@ ro.vendor.md_mims_support u:object_r:mtk_telephony_sensitive_prop:s0
#=============allow processes to change thermal config================ #=============allow processes to change thermal config================
vendor.thermal.manager.data u:object_r:mtk_thermal_config_prop:s0 vendor.thermal.manager.data u:object_r:mtk_thermal_config_prop:s0
#=============allow composer set property ============================ #=============allow composer set property ============================
debug.sf.hwc_pid u:object_r:graphics_hwc_pid_prop:s0 vendor.debug.sf.hwc_pid u:object_r:graphics_hwc_pid_prop:s0
#=============allow graphics debug property ============================
vendor.debug.sf. u:object_r:graphics_debug_prop:s0
vendor.debug.hwc. u:object_r:graphics_debug_prop:s0
vendor.debug.bq. u:object_r:graphics_debug_prop:s0
#============= mtkcam property ============================ #============= mtkcam property ============================
persist.mtkcam. u:object_r:mtkcam_prop:s0 persist.mtkcam. u:object_r:mtkcam_prop:s0

1
non_plat/surfaceflinger.te
View File

@ -57,5 +57,6 @@ allow surfaceflinger proc_perfmgr:file {open read ioctl};
# Operation : Debug # Operation : Debug
# Purpose: Allow to dump HWC backtrace # Purpose: Allow to dump HWC backtrace
get_prop(surfaceflinger, graphics_hwc_pid_prop) get_prop(surfaceflinger, graphics_hwc_pid_prop)
get_prop(surfaceflinger, graphics_debug_prop)
allow surfaceflinger hal_graphics_composer_default:dir search; allow surfaceflinger hal_graphics_composer_default:dir search;
allow surfaceflinger hal_graphics_composer_default:lnk_file read; allow surfaceflinger hal_graphics_composer_default:lnk_file read;