LineageOS/android_device_qcom_sepolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

sepolicy: Allow all app domains to search sysfs_kgsl

Browse Source 
Fixing below avc denails
type=1400 audit(0.0:86144): avc: denied { search } for
name="kgsl-3d0" dev="sysfs" ino=43551 scontext=u:r:mediaswcodec:s0

Change-Id: Ibf7a9a231119c23c4830538323587edbe95150a2
This commit is contained in:
Bharat Pawar
2020-09-03 19:13:07 +05:30
parent 3bdddf83fd
commit b4ca9cb07f
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
legacy/vendor/common/domain.te vendored
View File

@@ -66,5 +66,7 @@ get_prop(domain, public_vendor_default_prop)
allow domain qti_debugfs:dir search;
# allow all context to read sysfs_kgsl
allow { domain - isolated_app } sysfs_kgsl:dir search;
# allow all context to read gpu model
allow { domain - isolated_app } sysfs_kgsl_gpu_model:file r_file_perms;
allow { domain - isolated_app } sysfs_kgsl_gpu_model:file r_file_perms;