From a7a2701b66fcb3560a38bf6bfb44b5ad91d79569 Mon Sep 17 00:00:00 2001
From: "Kaiduan.Cao" <kaiduan.cao@mediatek.com>
Date: Sat, 18 Jan 2020 10:15:23 +0800
Subject: [PATCH] [ALPS04654012] SurfaceFlinger: update proc_ged sepolicy

Update the sepolicy for surfaceflinger proc_ged ioctl.

MTK-Commit-Id: 61dc5b4a1d4886d3a53879e4db927ec7f115b3b5

Change-Id: I1479e29fa864c44e8ed3850a650511ca4ba52602
CR-Id: ALPS04654012
Feature: [Module]SurfaceFlinger/HWComposer
---
 non_plat/surfaceflinger.te | 36 ++++++++++++++++++++++++------------
 1 file changed, 24 insertions(+), 12 deletions(-)

diff --git a/non_plat/surfaceflinger.te b/non_plat/surfaceflinger.te
index f811394..91fc852 100644
--- a/non_plat/surfaceflinger.te
+++ b/non_plat/surfaceflinger.te
@@ -10,7 +10,7 @@ allow surfaceflinger debug_prop:property_service set;
 
 # Date : WK16.33
 # Purpose: Allow to access ged for gralloc_extra functions
-allow surfaceflinger proc_ged:file {open read write ioctl getattr};
+allow surfaceflinger proc_ged:file rw_file_perms;
 
 # Date : W16.42
 # Operation : Integration
@@ -69,17 +69,29 @@ get_prop(surfaceflinger, debug_bq_dump_prop)
 
 allowxperm surfaceflinger proc_perfmgr:file ioctl {GED_BRIDGE_IO_LOG_BUF_GET GED_BRIDGE_IO_BOOST_GPU_FREQ GED_BRIDGE_IO_QUERY_INFO};
 allowxperm surfaceflinger proc_ged:file ioctl {
-GED_BRIDGE_IO_LOG_BUF_GET
-GED_BRIDGE_IO_BOOST_GPU_FREQ
-GED_BRIDGE_IO_QUERY_INFO
-GED_BRIDGE_IO_GE_GET
-GED_BRIDGE_IO_LOG_BUF_WRITE
-GED_BRIDGE_IO_GE_SET
-GED_BRIDGE_IO_GE_ALLOC
-GED_BRIDGE_IO_GE_INFO
-GED_BRIDGE_IO_IOCTLCMD_0F
-GED_BRIDGE_IO_IOCTLCMD_10
-GED_BRIDGE_IO_MONITOR_3D_FENCE
+  GED_BRIDGE_IO_LOG_BUF_GET
+  GED_BRIDGE_IO_BOOST_GPU_FREQ
+  GED_BRIDGE_IO_QUERY_INFO
+  GED_BRIDGE_IO_GE_GET
+  GED_BRIDGE_IO_LOG_BUF_WRITE
+  GED_BRIDGE_IO_GE_SET
+  GED_BRIDGE_IO_GE_ALLOC
+  GED_BRIDGE_IO_GE_INFO
+  GED_BRIDGE_IO_IOCTLCMD_0F
+  GED_BRIDGE_IO_IOCTLCMD_10
+  GED_BRIDGE_IO_MONITOR_3D_FENCE
+  GED_BRIDGE_IO_NOTIFY_VSYNC
+  GED_BRIDGE_IO_DVFS_PROBE
+  GED_BRIDGE_IO_DVFS_UM_RETURN
+  GED_BRIDGE_IO_EVENT_NOTIFY
+  GED_BRIDGE_IO_WAIT_HW_VSYNC
+  GED_BRIDGE_IO_QUERY_TARGET_FPS
+  GED_BRIDGE_IO_VSYNC_WAIT
+  GED_BRIDGE_IO_GPU_HINT_TO_CPU
+  GED_BRIDGE_IO_LOG_BUF_RESET
+  GED_BRIDGE_IO_GPU_TIMESTAMP
+  GED_BRIDGE_IO_TARGET_FPS
+  GED_BRIDGE_IO_GPU_TUNER_STATUS
 };
 
 # Date : WK19.4