summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPraneeth Bajjuri2019-05-08 23:53:50 -0500
committerPraneeth Bajjuri2019-05-09 16:14:09 -0500
commit114e076c58776e81cc308a8d4c14b4a51345b76f (patch)
treee4c489165d8c42dde01c6875040bf3d9be90617b
parenta88ab237dd867f5c19ced436cf2a7ce2fe20edbf (diff)
downloaddevice-ti-j721e-114e076c58776e81cc308a8d4c14b4a51345b76f.tar.gz
device-ti-j721e-114e076c58776e81cc308a8d4c14b4a51345b76f.tar.xz
device-ti-j721e-114e076c58776e81cc308a8d4c14b4a51345b76f.zip
sepolicy: Add policy for ion_device
pvr and graphics services uses ion_device now, update sepolicy to fix denials Signed-off-by: Praneeth Bajjuri <praneeth@ti.com>
-rw-r--r--sepolicy/hal_graphics_allocator_default.te1
-rw-r--r--sepolicy/surfaceflinger.te2
2 files changed, 3 insertions, 0 deletions
diff --git a/sepolicy/hal_graphics_allocator_default.te b/sepolicy/hal_graphics_allocator_default.te
new file mode 100644
index 0000000..02c6d78
--- /dev/null
+++ b/sepolicy/hal_graphics_allocator_default.te
@@ -0,0 +1 @@
allow hal_graphics_allocator_default ion_device:chr_file write;
diff --git a/sepolicy/surfaceflinger.te b/sepolicy/surfaceflinger.te
new file mode 100644
index 0000000..fd7dc3f
--- /dev/null
+++ b/sepolicy/surfaceflinger.te
@@ -0,0 +1,2 @@
1hal_server_domain(surfaceflinger, hal_graphics_allocator);
2allow surfaceflinger ion_device:chr_file write;