From cc27fae6e586a125c65e619d36d685e61eb4d003 Mon Sep 17 00:00:00 2001 From: Shiyong Li Date: Wed, 22 Sep 2021 16:08:28 +0000 Subject: [PATCH] allow hwc to access displaycolor service Fix the following violations: SELinux : avc: denied { add } for pid=487 uid=1000 name=displaycolor scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:vendor_displaycolor_service:s0 tclass=service_manager permissive=1 SELinux : avc: denied { find } for pid=487 uid=1000 name=displaycolor scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:vendor_displaycolor_service:s0 tclass=service_manager permissive=1 Bug: 199467938 Test: check avc denials while hwc loads calibration file Signed-off-by: Shiyong Li Change-Id: I43865b0a0fc406dc1955b58a80295c556d650797 --- whitechapel_pro/hal_graphics_composer_default.te | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 whitechapel_pro/hal_graphics_composer_default.te diff --git a/whitechapel_pro/hal_graphics_composer_default.te b/whitechapel_pro/hal_graphics_composer_default.te new file mode 100644 index 00000000..4da87fbf --- /dev/null +++ b/whitechapel_pro/hal_graphics_composer_default.te @@ -0,0 +1,3 @@ +# allow HWC to access vendor_displaycolor_service +add_service(hal_graphics_composer_default, vendor_displaycolor_service) +