62cf1a413a
[Detail] There is a workaround for bring-up, now it needs to be modified. [Solution] 1.Split workaround to sepcial *.te 2.Modify ged sepolicy 3.Modify mistake 4.Add sepolicy MTK-Commit-Id: 5a2b7e3fdc826a7ca6bc70a3810f14c1661e7d79 Change-Id: I0894de45e014a5eae754e35b57fbc9b21bc4bf90 CR-Id: ALPS04639771 Feature: [Android Default] SELinux, SEAndroid, and SE-MTK
53 lines
1.7 KiB
Plaintext
53 lines
1.7 KiB
Plaintext
# ==============================================
|
|
# Policy File of /vendor/bin/hw/vendor.mediatek.hardware.gpu@1.0-service Executable File
|
|
|
|
# ==============================================
|
|
# Type Declaration
|
|
# ==============================================
|
|
|
|
type mtk_hal_gpu, domain;
|
|
type mtk_hal_gpu_exec, exec_type, file_type, vendor_file_type;
|
|
|
|
# ==============================================
|
|
# MTK Policy Rule
|
|
# ==============================================
|
|
|
|
# Setup for domain transition
|
|
init_daemon_domain(mtk_hal_gpu)
|
|
|
|
# Allow to use HWBinder IPC
|
|
hwbinder_use(mtk_hal_gpu);
|
|
|
|
# Allow a set of permissions required for a domain to be a server which provides a HAL implementation over HWBinder.
|
|
hal_server_domain(mtk_hal_gpu, hal_gpu)
|
|
|
|
# add/find permission rule to hwservicemanager
|
|
add_hwservice(hal_gpu, mtk_hal_gpu_hwservice)
|
|
allow hal_gpu_client mtk_hal_gpu_hwservice:hwservice_manager find;
|
|
|
|
# Allow to allocate hidl memory
|
|
hal_client_domain(mtk_hal_gpu, hal_allocator)
|
|
|
|
# Purpose : Allow to use kernel driver
|
|
allow mtk_hal_gpu graphics_device:chr_file rw_file_perms;
|
|
|
|
# Purpose : Allow property set
|
|
allow mtk_hal_gpu init:unix_stream_socket connectto;
|
|
allow mtk_hal_gpu property_socket:sock_file write;
|
|
|
|
|
|
# Purpose : Allow permission to set pq property
|
|
#set_prop(mtk_hal_gpu, mtk_gpu_prop)
|
|
|
|
allow mtk_hal_gpu debugfs_ged:dir rw_dir_perms;
|
|
allow mtk_hal_gpu debugfs_ged:file rw_file_perms;
|
|
allow mtk_hal_gpu proc_ged:file rw_file_perms;
|
|
allowxperm mtk_hal_gpu proc_ged:file ioctl { proc_ged_ioctls };
|
|
|
|
allow mtk_hal_gpu hal_graphics_allocator_default:fd use;
|
|
allow mtk_hal_gpu ion_device:chr_file r_file_perms;
|
|
allow mtk_hal_gpu debugfs_ion:dir search;
|
|
|
|
allow mtk_hal_gpu merged_hal_service:fd use;
|
|
|