sepolicy/hal_graphics_composer_default.te

   1 hal_client_domain(hal_graphics_composer_default, hal_graphics_allocator);
   2
   3 vndbinder_use(hal_graphics_composer_default)
   4
   5 allow hal_graphics_composer_default self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;
   6
   7 allow hal_graphics_composer_default vendor_surfaceflinger_vndservice:service_manager { add find };
   8
   9 # cgroup tasks
  10 allow hal_graphics_composer_default cgroup:file getattr;
  11
  12 # /data/vendor/log/hwc
  13 allow hal_graphics_composer_default log_vendor_data_file:dir rw_dir_perms;
  14 allow hal_graphics_composer_default log_vendor_data_file:file create_file_perms;
  15
  16 # /dev/g2d
  17 allow hal_graphics_composer_default graphics_device:chr_file rw_file_perms;
  18
  19 # /dev/video50
  20 allow hal_graphics_composer_default video_device:chr_file rw_file_perms;
  21
  22 # /sys/devices/soc0/revision
  23 allow hal_graphics_composer_default sysfs_socinfo:dir r_dir_perms;
  24 allow hal_graphics_composer_default sysfs_socinfo:file r_file_perms;
  25
  26 # /sys/devices/platform/12860000.decon_f/psr_info
  27 allow hal_graphics_composer_default sysfs_decon:dir r_dir_perms;
  28 allow hal_graphics_composer_default sysfs_decon:file r_file_perms;
  29
  30 # /sys/devices/platform/12860000.decon_f/vsync
  31 allow hal_graphics_composer_default sysfs_ss_writable:dir r_dir_perms;
  32 allow hal_graphics_composer_default sysfs_ss_writable:file r_file_perms;
  33
  34 # /sys/kernel/debug/dma_buf/footprint/[0-9]+
  35 allow hal_graphics_composer_default debugfs_ion_dma:dir r_dir_perms;
  36 allow hal_graphics_composer_default debugfs_ion_dma:file r_file_perms;