From 8fb23328643b8cb9aa022983dcf721f24215bdbe Mon Sep 17 00:00:00 2001
From: Chi Zhang <czhangsd@google.com>
Date: Fri, 16 Feb 2024 11:48:07 -0800
Subject: [PATCH] Allow GRIL to get IRQ counts.

auditd  : type=1400 audit(0.0:94): avc:  denied  { read } for  comm="TestableLooper" name="irq" dev="sysfs" ino=20470 scontext=u:r:grilservice_app:s0:c241,c256,c512,c768 tcontext=u:object_r:sysfs_irq:s0 tclass=dir permissive=0 app=com.google.android.grilservice

Bug: 322548372
Test: build and boot
Change-Id: Iffc7f49d28ccd1960e6f939375a8e42958eff8bb
---
 radio/grilservice_app.te | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/radio/grilservice_app.te b/radio/grilservice_app.te
index 3a093c8..090cbe6 100644
--- a/radio/grilservice_app.te
+++ b/radio/grilservice_app.te
@@ -17,3 +17,6 @@ binder_call(grilservice_app, hal_wifi_ext)
 binder_call(grilservice_app, hal_audiometricext_default)
 binder_call(grilservice_app, rild)
 hal_client_domain(grilservice_app, hal_power_stats)
+# Read access to /sys/kernel/irq
+allow grilservice_app sysfs_irq:dir r_dir_perms;
+allow grilservice_app sysfs_irq:file r_file_perms;