diff --git a/non_plat/surfaceflinger.te b/non_plat/surfaceflinger.te index f811394..91fc852 100644 --- a/non_plat/surfaceflinger.te +++ b/non_plat/surfaceflinger.te @@ -10,7 +10,7 @@ allow surfaceflinger debug_prop:property_service set; # Date : WK16.33 # Purpose: Allow to access ged for gralloc_extra functions -allow surfaceflinger proc_ged:file {open read write ioctl getattr}; +allow surfaceflinger proc_ged:file rw_file_perms; # Date : W16.42 # Operation : Integration @@ -69,17 +69,29 @@ get_prop(surfaceflinger, debug_bq_dump_prop) allowxperm surfaceflinger proc_perfmgr:file ioctl {GED_BRIDGE_IO_LOG_BUF_GET GED_BRIDGE_IO_BOOST_GPU_FREQ GED_BRIDGE_IO_QUERY_INFO}; allowxperm surfaceflinger proc_ged:file ioctl { -GED_BRIDGE_IO_LOG_BUF_GET -GED_BRIDGE_IO_BOOST_GPU_FREQ -GED_BRIDGE_IO_QUERY_INFO -GED_BRIDGE_IO_GE_GET -GED_BRIDGE_IO_LOG_BUF_WRITE -GED_BRIDGE_IO_GE_SET -GED_BRIDGE_IO_GE_ALLOC -GED_BRIDGE_IO_GE_INFO -GED_BRIDGE_IO_IOCTLCMD_0F -GED_BRIDGE_IO_IOCTLCMD_10 -GED_BRIDGE_IO_MONITOR_3D_FENCE +  GED_BRIDGE_IO_LOG_BUF_GET +  GED_BRIDGE_IO_BOOST_GPU_FREQ +  GED_BRIDGE_IO_QUERY_INFO +  GED_BRIDGE_IO_GE_GET +  GED_BRIDGE_IO_LOG_BUF_WRITE +  GED_BRIDGE_IO_GE_SET +  GED_BRIDGE_IO_GE_ALLOC +  GED_BRIDGE_IO_GE_INFO + GED_BRIDGE_IO_IOCTLCMD_0F + GED_BRIDGE_IO_IOCTLCMD_10 +  GED_BRIDGE_IO_MONITOR_3D_FENCE +  GED_BRIDGE_IO_NOTIFY_VSYNC +  GED_BRIDGE_IO_DVFS_PROBE +  GED_BRIDGE_IO_DVFS_UM_RETURN +  GED_BRIDGE_IO_EVENT_NOTIFY +  GED_BRIDGE_IO_WAIT_HW_VSYNC +  GED_BRIDGE_IO_QUERY_TARGET_FPS +  GED_BRIDGE_IO_VSYNC_WAIT +  GED_BRIDGE_IO_GPU_HINT_TO_CPU +  GED_BRIDGE_IO_LOG_BUF_RESET +  GED_BRIDGE_IO_GPU_TIMESTAMP +  GED_BRIDGE_IO_TARGET_FPS +  GED_BRIDGE_IO_GPU_TUNER_STATUS }; # Date : WK19.4