whitechapel_pro/hal_graphics_allocator_default.te

allow hal_graphics_allocator_default sensor_direct_heap_device:chr_file r_file_perms;
allow hal_graphics_allocator_default faceauth_heap_device:chr_file r_file_perms;
allow hal_graphics_allocator_default dmabuf_system_secure_heap_device:chr_file r_file_perms;
allow hal_graphics_allocator_default vscaler_heap_device:chr_file r_file_perms;
Add required sepolicy rules for Camera function Bug: 218499972 Test: Switch to Enforcing mode Take a picture, camera recording Change-Id: I57f3e8454ece6906624f028b7a3771ffddcaa963 2022-02-10 01:56:02 +08:00			`allow hal_graphics_allocator_default sensor_direct_heap_device:chr_file r_file_perms;`
Give gralloc access to the faceauth_heap_device. Notes: - This is required for face authentication. Fixes: 221098313 Test: Built locally. Change-Id: I6292c76c0809f091108ac73bef2d9e2db430a680 2022-02-23 15:57:30 -08:00			`allow hal_graphics_allocator_default faceauth_heap_device:chr_file r_file_perms;`
Allow hal_graphics_allocator to access dmabuf_system_secure_heap_device avc: denied { ioctl } for path="/dev/dma_heap/vframe-secure" dev="tmpfs" \ ino=801 ioctlcmd=0x4800 scontext=u:r:hal_graphics_allocator_default:s0 \ tcontext=u:object_r:dmabuf_system_secure_heap_device:s0 \ tclass=chr_file permissive=0 Bug: 199467922 Test: ExoPlayer secure playback Change-Id: I9e6e1bba6d01c1a416a440e8ad425a5cf2ac19c5 2022-02-21 03:42:32 +00:00			`allow hal_graphics_allocator_default dmabuf_system_secure_heap_device:chr_file r_file_perms;`
Allow hal_graphics_allocator to access vscaler_heap_device avc: denied { read } for name="vscaler-secure" dev="tmpfs" \ ino=458 scontext=u:r:hal_graphics_allocator_default:s0 \ tcontext=u:object_r:vscaler_heap_device:s0 \ tclass=chr_file permissive=0 Bug: 199467922 Test: ExoPlayer secure playback Change-Id: I2b3be9f4f038317eb456a20b33e555e8d5db2678 2022-02-21 04:10:33 +00:00			`allow hal_graphics_allocator_default vscaler_heap_device:chr_file r_file_perms;`