android_device_mediatek_sep.../non_plat/hal_graphics_allocator.te
Juju Sung ef49210dc0 [ALPS04367884] Sepolicy: workaround for denied policy(2)
[Detail]
Set proc node specific node
- hraphic_allocator
- bootanim
- aee_core_forwarder

MTK-Commit-Id: 3a2620f6c38a355ad1fc22e570cc2bc119ab6d48

Change-Id: I4b0572c43b44c730b9cd368870c4ff0d79f6de8d
CR-Id: ALPS04367884
Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
2020-01-18 10:09:22 +08:00

8 lines
261 B
Plaintext

# Date : WK17.13
# Operation : Add sepolicy
# Purpose : Add policy for gralloc HIDL
allow hal_graphics_allocator proc_ged:file { read ioctl open };
allowxperm hal_graphics_allocator_default proc_ged:file ioctl { GED_BRIDGE_IO_GE_ALLOC GED_BRIDGE_IO_GE_GET };