From a9896e610acbcbece76c34937d8b27a4a65d4808 Mon Sep 17 00:00:00 2001 From: xiaojun liang Date: Wed, 17 Jan 2018 07:12:46 +0000 Subject: sepolicy: resolve the sysfs neverallow error[1/1] PD#158573 add the new sysfs type for the mpgpu scale Change-Id: I93ea475d6c623546f03c26af9cc5384f37f64cec --- diff --git a/sepolicy/file.te b/sepolicy/file.te index 59b2db8..ed24f76 100644 --- a/sepolicy/file.te +++ b/sepolicy/file.te @@ -23,6 +23,7 @@ type param_tv_file, file_type; #power type sysfs_mpgpu_cmd, fs_type, sysfs_type; type sysfs_power_trigger, fs_type, sysfs_type; +type sysfs_mpgpu_scale, fs_type, sysfs_type; type sysfs_digital_codec, fs_type, sysfs_type; type sysfs_audio_samesource, fs_type, sysfs_type; diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts index 06121e9..8d71347 100644 --- a/sepolicy/file_contexts +++ b/sepolicy/file_contexts @@ -101,7 +101,8 @@ /sys/devices/virtual/amhdmitx/amhdmitx0/aud_output_chs u:object_r:sysfs_aud_output_chs:s0 /sys/class/mpgpu/mpgpucmd u:object_r:sysfs_mpgpu_cmd:s0 /sys/power/early_suspend_trigger u:object_r:sysfs_power_trigger:s0 - +/sys/class/mpgpu/scale_mode u:object_r:sysfs_mpgpu_scale:s0 +/sys/module/di/parameters/bypass_all u:object_r:sysfs_mpgpu_scale:s0 /param(/.*)? u:object_r:param_tv_file:s0 /tee(/.*)? u:object_r:tee_data_file:s0 diff --git a/sepolicy/mediaserver.te b/sepolicy/mediaserver.te index 1e4c02d..ec88422 100644 --- a/sepolicy/mediaserver.te +++ b/sepolicy/mediaserver.te @@ -13,7 +13,7 @@ allow mediaserver codec_device:chr_file rw_file_perms; #allow mediaserver graphics_device:dir r_dir_perms; #allow mediaserver system_data_file:dir {write add_name}; -#allow mediaserver sysfs:file { open read write}; +allow mediaserver sysfs_mpgpu_scale:file { open read write}; #allow mediaserver sysfs_xbmc:file {open read write}; #allow mediaserver screenmediasource_service:service_manager add; #allow mediaserver system_control_service:service_manager find; diff --git a/sepolicy/system_app.te b/sepolicy/system_app.te index 4529e3a..fa5c9a8 100644 --- a/sepolicy/system_app.te +++ b/sepolicy/system_app.te @@ -41,6 +41,7 @@ allow system_app cache_file:file { create getattr open write }; #allow system_app pppoe_wrapper_socket:sock_file unlink; #allow system_app pppoe_wrapper_socket:file create; +allow system_app sysfs_mpgpu_scale:file { read write open }; allow system_app cache_recovery_file:dir { search read open write add_name remove_name }; allow system_app cache_recovery_file:file { create getattr open read write unlink }; -- cgit