Add sepolicy for NNAPI HAL to access hal_graphics_allocator_service,

This is required for AHardwareBuffer allocation.

Attached avc error log in commit message:

E SELinux : avc:  denied  { find } for pid=820 uid=1000 name=android.hardware.graphics.allocator.IAllocator/default scontext=u:r:hal_neuralnetworks_darwinn:s0 tcontext=u:object_r:hal_graphics_allocator_service:s0 tclass=service_manager permissive=0

Bug: 361711471
Test: Flash private build, run CTS NNAPI tests.
Change-Id: I7850bd0c64974180cee206bfc43c25b70fac3f79
This commit is contained in:
Nishok Kumar S 2024-09-02 10:28:25 +00:00
parent 37238f4cff
commit db15a0bcf2

View file

@ -1,3 +1,4 @@
# Sepolicies for EdgeTPU
type hal_neuralnetworks_darwinn, domain;
hal_server_domain(hal_neuralnetworks_darwinn, hal_neuralnetworks)
@ -62,3 +63,8 @@ get_prop(hal_neuralnetworks_darwinn, vendor_hetero_runtime_prop)
# Allow DMA Buf access.
allow hal_neuralnetworks_darwinn dmabuf_system_heap_device:chr_file r_file_perms;
# Allows the NNAPI HAL to access the graphics_allocator_service.
# This is required for shared memory buffer allocation.
# Context:- b/361711471.
hal_client_domain(hal_neuralnetworks_darwinn, hal_graphics_allocator);
allow hal_neuralnetworks_darwinn hal_graphics_allocator_service:service_manager find;