Add sepolicy for hwcomposer to access lhbm sysfs

avc: denied { read write } for comm="android.hardwar" name="local_hbm_mode" dev="sysfs" ino=70189 scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:sysfs_lhbm:s0 tclass=file permissive=0

Bug: 190563896
test: check avc denied
Change-Id: I0f6abc1244d24781ff3318908b524a889490993d
This commit is contained in:
linpeter 2021-04-19 21:06:45 +08:00
parent 90ae782e26
commit 81aaf6cda3

View file

@ -40,3 +40,6 @@ allow hal_graphics_composer_default vendor_log_file:file create_file_perms;
# allow HWC to output to dumpstate via pipe fd # allow HWC to output to dumpstate via pipe fd
allow hal_graphics_composer_default hal_dumpstate_default:fifo_file { append write }; allow hal_graphics_composer_default hal_dumpstate_default:fifo_file { append write };
allow hal_graphics_composer_default hal_dumpstate_default:fd use; allow hal_graphics_composer_default hal_dumpstate_default:fd use;
# allow HWC to access LHBM sysfs
allow hal_graphics_composer_default sysfs_lhbm:file rw_file_perms;