diff --git a/whitechapel/vendor/google/edgetpu_service.te b/whitechapel/vendor/google/edgetpu_service.te index a30400ad..96e452ca 100644 --- a/whitechapel/vendor/google/edgetpu_service.te +++ b/whitechapel/vendor/google/edgetpu_service.te @@ -34,3 +34,7 @@ binder_call(edgetpu_server, system_server); # Allow EdgeTPU service to access Android shared memory allocated # by the camera hal for on-device compilation. allow edgetpu_server hal_camera_default:fd use; + +# Allow EdgeTPU service to read the kernel version. +# This is done inside the InitGoogle. +allow edgetpu_server proc_version:file r_file_perms; diff --git a/whitechapel/vendor/google/hal_neuralnetworks_darwinn.te b/whitechapel/vendor/google/hal_neuralnetworks_darwinn.te index 25ba9f28..2791a525 100644 --- a/whitechapel/vendor/google/hal_neuralnetworks_darwinn.te +++ b/whitechapel/vendor/google/hal_neuralnetworks_darwinn.te @@ -18,3 +18,7 @@ allow hal_neuralnetworks_darwinn hal_neuralnetworks_darwinn_data_file:dir rw_dir # add_hwservice() is granted by hal_server_domain + hal_neuralnetworks.te hwbinder_use(hal_neuralnetworks_darwinn) get_prop(hal_neuralnetworks_darwinn, hwservicemanager_prop) + +# Allow TPU HAL to read the kernel version. +# This is done inside the InitGoogle. +allow hal_neuralnetworks_darwinn proc_version:file r_file_perms;