Add sepolicy for NNAPI HAL to access hal_graphics_allocator_service,
This is required for AHardwareBuffer allocation.
Attached avc error log in commit message:
E SELinux : avc: denied { find } for pid=820 uid=1000 name=android.hardware.graphics.allocator.IAllocator/default scontext=u:r:hal_neuralnetworks_darwinn:s0 tcontext=u:object_r:hal_graphics_allocator_service:s0 tclass=service_manager permissive=0
Bug: 361711471
Test: Flash private build, run CTS NNAPI tests.
Change-Id: I7850bd0c64974180cee206bfc43c25b70fac3f79
This commit is contained in:
@@ -1,3 +1,4 @@
|
||||
# Sepolicies for EdgeTPU
|
||||
type hal_neuralnetworks_darwinn, domain;
|
||||
hal_server_domain(hal_neuralnetworks_darwinn, hal_neuralnetworks)
|
||||
|
||||
@@ -62,3 +63,8 @@ get_prop(hal_neuralnetworks_darwinn, vendor_hetero_runtime_prop)
|
||||
# Allow DMA Buf access.
|
||||
allow hal_neuralnetworks_darwinn dmabuf_system_heap_device:chr_file r_file_perms;
|
||||
|
||||
# Allows the NNAPI HAL to access the graphics_allocator_service.
|
||||
# This is required for shared memory buffer allocation.
|
||||
# Context:- b/361711471.
|
||||
hal_client_domain(hal_neuralnetworks_darwinn, hal_graphics_allocator);
|
||||
allow hal_neuralnetworks_darwinn hal_graphics_allocator_service:service_manager find;
|
||||
|
||||
Reference in New Issue
Block a user