sepolicy/pvr.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

type pvr, domain;
type pvr_exec, exec_type, vendor_file_type, file_type;

# Started by init
init_daemon_domain(pvr)

# allow access to /dev/dri/
allow pvr gpu_device:chr_file rw_file_perms;

# Access /dev/ion
allow pvr ion_device:chr_file rw_file_perms;

# allow graphics driver initialization
allow pvr self:capability sys_module;
allow pvr vendor_file:system module_load;

# allow reading /sys/devices/soc0/machine
allow pvr sysfs_socinfo:dir { r_dir_perms };
allow pvr sysfs_socinfo:file { r_file_perms };