display/hwc: Add write access to persist display file.

12-06 21:50:44.540   466   466 W vndbinder:466_2: type=1400 audit(0.0:186): avc:  denied  { write } for  name="factory_c
al0.pb" dev="sda1" ino=40 scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:persist_display_file:s0 tcla
ss=file permissive=0

Bug: 369456857
Test: adb shell displaycolor_service 20000
Flag: EXEMPT not applicable
Change-Id: I97a1d8e701d02d37e7d3be80a92d311948863536
This commit is contained in:
Jeremy Nei 2024-12-16 05:53:41 +00:00
parent 13173c755d
commit 1cc3b8e59b

View file

@ -26,7 +26,7 @@ add_service(hal_graphics_composer_default, hal_pixel_display_service)
# allow HWC/libdisplaycolor to read calibration data
allow hal_graphics_composer_default mnt_vendor_file:dir search;
allow hal_graphics_composer_default persist_file:dir search;
allow hal_graphics_composer_default persist_display_file:file r_file_perms;
allow hal_graphics_composer_default persist_display_file:file rw_file_perms;
allow hal_graphics_composer_default persist_display_file:dir search;
# allow HWC to get/set vendor_display_prop