Sepolicy: add more file and device labels and fix denials
[GitHub/exynos8895/android_device_samsung_universal8895-common.git] / sepolicy / untrusted_app_27.te
1 # /dev/mali0
2 allow untrusted_app_27 gpu_device:chr_file { ioctl read write };
3
4 allow untrusted_app_27 debugfs_ion:dir search;
5 allow untrusted_app_27 debugfs_mali:dir search;
6 allow untrusted_app_27 debugfs_mali_mem:dir search;
7
8 allow untrusted_app_27 sysfs_net:dir search;
9 allow untrusted_app_27 sysfs_virtual:file { open read getattr };
10 allow untrusted_app_27 sysfs_virtual:dir search;