diff options
| author | Amit Pundir <amit.pundir@linaro.org> | 2020-02-19 00:12:48 +0530 |
|---|---|---|
| committer | Amit Pundir <amit.pundir@linaro.org> | 2020-03-30 18:57:11 +0530 |
| commit | 777d946adf9d73f30d39e985407d7112d65eda99 (patch) | |
| tree | dba5912699fcea9cac02ba4333f9b9997f489964 | |
| parent | 4eef573f195236060f96c73a1c8ad4ccc82550da (diff) | |
sepolicy: Allow access to graphics_device getattr
dmesg and logcat is filled with selinux denials
related to getting access to graphics device
attributes.
From bootanimation to all the way up to video
playback, all display/graphics related apps/services
seem to need access to graphics device attributes.
Although the denials are non-fatal but it is good
to get rid of the denial messages.
Change-Id: Ic65364c08b5de8aab8b22997ab5215304a4782ac
Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
| -rw-r--r-- | sepolicy/te_macros | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sepolicy/te_macros b/sepolicy/te_macros index 322827a..e7e11c3 100644 --- a/sepolicy/te_macros +++ b/sepolicy/te_macros @@ -5,4 +5,5 @@ define(`gpu_access', ` allow $1 dri_device:dir { open read search }; allow $1 sysfs_gpu:dir search; allow $1 sysfs_gpu:file { getattr open read }; +allow $1 graphics_device:chr_file getattr; ') |