Skip to content
Commit 96af83ae authored by Hareesh Gundu's avatar Hareesh Gundu Committed by Gerrit - the friendly Code Review server
Browse files

sepolicy: Add a rule to access gpu configuration settings

For all GPU application needs access to /data/vendor/gpu path to
configure the graphics user mode driver. Also it need access to
sysfs kgsl snapshot path for getting the gpu snapshot dump and
timestamp information.

Also Addressing following denials :
comm.adrenotest: type=1400 audit(0.0:204): avc: denied { open } for
path="/data/misc/gpu/esx_config.txt" dev="dm-0" ino=148200
scontext=u:r:untrusted_app_25:s0:c512,c768
tcontext=u:object_r:system_data_file:s0 tclass=file permissive=0
comm.adrenotest: type=1400 audit(0.0:205): avc: denied { open } for
path="/data/misc/gpu/adreno_config.txt" dev="dm-0" ino=148213
scontext=u:r:untrusted_app_25:s0:c512,c768
tcontext=u:object_r:system_data_file:s0 tclass=file permissive=0
comm.adrenotest: type=1400 audit(0.0:175): avc: denied { search } for
name="kgsl-3d0" dev="sysfs" ino=35267
scontext=u:r:untrusted_app_25:s0:c512,c768
tcontext=u:object_r:sysfs_kgsl:s0 tclass=dir permissive=0

CRs-Fixed: 2081160
Change-Id: Iee9cf0a9cad71856db12c31f80b1a87b79ddd42f
parent e6fe86a3
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment