Allowed edgetpu_vendor_service to access hetero runtime system

properties.

Those properties include the one for trace level
("vendor.google.silicon.max_trace_level"), which will be used by the
edgetpu vendor service during on device compilation. This change is
required to avoid SELinux errors.

Bug: 282963211
Test: verified no avc error after this change with GCA + perfetto.
Change-Id: I66333571bc9dbbf86e033eefb1054c79b260ff67
This commit is contained in:
Yu-Chi Cheng 2023-05-17 14:29:05 -07:00
parent 98761efacc
commit 708eec566d

View file

@ -29,3 +29,6 @@ allow edgetpu_vendor_server proc_version:file r_file_perms;
# Allow EdgeTPU vendor service to read the overcommit_memory info. # Allow EdgeTPU vendor service to read the overcommit_memory info.
allow edgetpu_vendor_server proc_overcommit_memory:file r_file_perms; allow edgetpu_vendor_server proc_overcommit_memory:file r_file_perms;
# Allow EdgeTPU vendor service to read hetero runtime properties
get_prop(edgetpu_vendor_server, vendor_hetero_runtime_prop)