mirror of
https://github.com/Evolution-X-Devices/device_google_wahoo
synced 2026-02-01 07:50:47 +00:00
9df9ad04d4
It's causing surfaceflinger denials and does not exist on other
devices. Grant kernel read access to vendor/firmware's new type.
denied { search } for comm="surfaceflinger" name="firmware"
scontext=u:r:surfaceflinger:s0 tcontext=u:object_r:vendor_firmware_file:s0
tclass=dir
denied { read } for comm="surfaceflinger" name="a530_pm4.fw"
scontext=u:r:surfaceflinger:s0 tcontext=u:object_r:vendor_file:s0
tclass=file permissive=0
Test: boot Taimen without denials.
Bug: 68213100
Change-Id: I8b070a0aae59e12391c881cec8a46b6b4dbe1c67
15 lines
321 B
Plaintext
15 lines
321 B
Plaintext
# for diag over socket
|
|
userdebug_or_eng(`
|
|
allow kernel self:socket create;
|
|
')
|
|
|
|
dontaudit kernel kernel:system module_request;
|
|
|
|
# Read FDs from /vendor/firmware
|
|
allow kernel vendor_file:file r_file_perms;
|
|
|
|
allow kernel debugfs_ipc:dir search;
|
|
allow kernel persist_file:dir search;
|
|
|
|
allow kernel debugfs_wlan:dir search;
|