Merge "mediacodec: add GPU access policy" into main

2024-11-21 03:31:04 +00:00
parent 90398dea27 0649754278
commit 9cb50229d9
1 changed files with 1 additions and 0 deletions
--- a/mediacodec/vpu/sepolicy/mediacodec_google.te
+++ b/mediacodec/vpu/sepolicy/mediacodec_google.te
@@ -13,6 +13,7 @@ binder_call(mediacodec_google, hal_camera_default)

 allow mediacodec_google dmabuf_system_heap_device:chr_file r_file_perms;
 allow mediacodec_google video_device:chr_file { read write open ioctl map };
+allow mediacodec_google gpu_device:chr_file rw_file_perms;

 # mediacodec_google should never execute any executable without a domain transition
 neverallow mediacodec_google { file_type fs_type }:file execute_no_trans;