summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorVishal Mahaveer2015-07-10 16:07:49 -0500
committerVishal Mahaveer2015-07-10 16:07:49 -0500
commita402e758c3db150a90f26971c78b961a08b2c1f1 (patch)
tree7026e3d627d42d6ddaa26064f39c3268d05eab58 /sepolicy
parentb0522995603788b0aecb962b0aeb60d3b7479f89 (diff)
downloaddevice-ti-jacinto6evm-a402e758c3db150a90f26971c78b961a08b2c1f1.tar.gz
device-ti-jacinto6evm-a402e758c3db150a90f26971c78b961a08b2c1f1.tar.xz
device-ti-jacinto6evm-a402e758c3db150a90f26971c78b961a08b2c1f1.zip
jacinto6evm: add initial policies for graphics
Add policies for graphics binaries and device. Reference for pvr taken from device/asus/fugu project Change-Id: I8dba7b622096cdff8b609a9973a9e960b06b572c Signed-off-by: Vishal Mahaveer <vishalm@ti.com>
Diffstat (limited to 'sepolicy')
-rw-r--r--sepolicy/file_contexts8
-rw-r--r--sepolicy/pvr.te11
2 files changed, 19 insertions, 0 deletions
diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts
index 660c86b..4383589 100644
--- a/sepolicy/file_contexts
+++ b/sepolicy/file_contexts
@@ -3,3 +3,11 @@
3 3
4#Console 4#Console
5/dev/ttyS0 u:object_r:console_device:s0 5/dev/ttyS0 u:object_r:console_device:s0
6
7#Graphics
8/dev/dri/card0 u:object_r:gpu_device:s0
9/dev/dri/controlD64 u:object_r:gpu_device:s0
10/dev/dri/renderD128 u:object_r:gpu_device:s0
11
12/system/vendor/bin/pvrsrvctl u:object_r:pvr_exec:s0
13/system/vendor/bin/pvrsrvinit u:object_r:pvr_exec:s0
diff --git a/sepolicy/pvr.te b/sepolicy/pvr.te
new file mode 100644
index 0000000..fe4bf37
--- /dev/null
+++ b/sepolicy/pvr.te
@@ -0,0 +1,11 @@
1type pvr, domain;
2type pvr_exec, exec_type, file_type;
3
4# Started by init
5init_daemon_domain(pvr)
6
7# allow access to /dev/dri/
8allow pvr gpu_device:chr_file rw_file_perms;
9
10# allow graphics driver initialization
11allow pvr self:capability sys_module;