| author | xiaojun liang <xiaojun.liang@amlogic.com> | 2018-01-17 07:12:46 (GMT) |
|---|---|---|
| committer | jie.yuan <jie.yuan@amlogic.com> | 2018-01-22 08:11:21 (GMT) |
| commit | a9896e610acbcbece76c34937d8b27a4a65d4808 (patch) | |
| tree | 8950bb0a8d03bbb402cc59ebd5f4eb96afe17d02 | |
| parent | 4f7200e306077cef48fb0887841f18dd998932c9 (diff) | |
| download | common-a9896e610acbcbece76c34937d8b27a4a65d4808.zip common-a9896e610acbcbece76c34937d8b27a4a65d4808.tar.gz common-a9896e610acbcbece76c34937d8b27a4a65d4808.tar.bz2 | |
sepolicy: resolve the sysfs neverallow error[1/1]
PD#158573
add the new sysfs type for the mpgpu scale
Change-Id: I93ea475d6c623546f03c26af9cc5384f37f64cec
| -rw-r--r-- | sepolicy/file.te | 1 | ||||
| -rw-r--r-- | sepolicy/file_contexts | 3 | ||||
| -rw-r--r-- | sepolicy/mediaserver.te | 2 | ||||
| -rw-r--r-- | sepolicy/system_app.te | 1 |
4 files changed, 5 insertions, 2 deletions
diff --git a/sepolicy/file.te b/sepolicy/file.te index 59b2db8..ed24f76 100644 --- a/sepolicy/file.te +++ b/sepolicy/file.te @@ -23,6 +23,7 @@ type param_tv_file, file_type; #power type sysfs_mpgpu_cmd, fs_type, sysfs_type; type sysfs_power_trigger, fs_type, sysfs_type; +type sysfs_mpgpu_scale, fs_type, sysfs_type; type sysfs_digital_codec, fs_type, sysfs_type; type sysfs_audio_samesource, fs_type, sysfs_type; diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts index 06121e9..8d71347 100644 --- a/sepolicy/file_contexts +++ b/sepolicy/file_contexts @@ -101,7 +101,8 @@ /sys/devices/virtual/amhdmitx/amhdmitx0/aud_output_chs u:object_r:sysfs_aud_output_chs:s0 /sys/class/mpgpu/mpgpucmd u:object_r:sysfs_mpgpu_cmd:s0 /sys/power/early_suspend_trigger u:object_r:sysfs_power_trigger:s0 - +/sys/class/mpgpu/scale_mode u:object_r:sysfs_mpgpu_scale:s0 +/sys/module/di/parameters/bypass_all u:object_r:sysfs_mpgpu_scale:s0 /param(/.*)? u:object_r:param_tv_file:s0 /tee(/.*)? u:object_r:tee_data_file:s0 diff --git a/sepolicy/mediaserver.te b/sepolicy/mediaserver.te index 1e4c02d..ec88422 100644 --- a/sepolicy/mediaserver.te +++ b/sepolicy/mediaserver.te @@ -13,7 +13,7 @@ allow mediaserver codec_device:chr_file rw_file_perms; #allow mediaserver graphics_device:dir r_dir_perms; #allow mediaserver system_data_file:dir {write add_name}; -#allow mediaserver sysfs:file { open read write}; +allow mediaserver sysfs_mpgpu_scale:file { open read write}; #allow mediaserver sysfs_xbmc:file {open read write}; #allow mediaserver screenmediasource_service:service_manager add; #allow mediaserver system_control_service:service_manager find; diff --git a/sepolicy/system_app.te b/sepolicy/system_app.te index 4529e3a..fa5c9a8 100644 --- a/sepolicy/system_app.te +++ b/sepolicy/system_app.te @@ -41,6 +41,7 @@ allow system_app cache_file:file { create getattr open write }; #allow system_app pppoe_wrapper_socket:sock_file unlink; #allow system_app pppoe_wrapper_socket:file create; +allow system_app sysfs_mpgpu_scale:file { read write open }; allow system_app cache_recovery_file:dir { search read open write add_name remove_name }; allow system_app cache_recovery_file:file { create getattr open read write unlink }; |