1 files changed, 16 insertions, 0 deletions

diff --git a/sepolicy/pvr.te b/sepolicy/pvr.te
new file mode 100644
index 0000000..cd57633
--- /dev/null
+++ b/sepolicy/pvr.te
@@ -0,0 +1,16 @@
+type pvr, domain;
+type pvr_exec, exec_type, vendor_file_type, file_type;
+
+# Started by init
+init_daemon_domain(pvr)
+
+# allow access to /dev/dri/
+allow pvr gpu_device:chr_file rw_file_perms;
+
+# allow graphics driver initialization
+allow pvr self:capability sys_module;
+allow pvr vendor_file:system module_load;
+
+# allow reading /sys/devices/soc0/machine
+allow pvr sysfs_socinfo:dir { r_dir_perms };
+allow pvr sysfs_socinfo:file { r_file_perms };