From 607903e888d250e789ccdc0fa3cb6beea77dc34c Mon Sep 17 00:00:00 2001 From: bengris32 Date: Thu, 6 Oct 2022 20:45:49 +0100 Subject: [PATCH] rosemary: Label mali nodes under sysfs Signed-off-by: bengris32 --- sepolicy/vendor/file.te | 3 +++ sepolicy/vendor/genfs_contexts | 3 +++ sepolicy/vendor/hal_power_default.te | 2 ++ 3 files changed, 8 insertions(+) diff --git a/sepolicy/vendor/file.te b/sepolicy/vendor/file.te index c0952f1..fd8b434 100644 --- a/sepolicy/vendor/file.te +++ b/sepolicy/vendor/file.te @@ -6,6 +6,9 @@ type vendor_fingerprint_data_file, data_file_type, file_type; type vendor_fingerprint_device, dev_type; type sysfs_fingerprint, fs_type, sysfs_type; +# Graphics +type sysfs_mali, fs_type, sysfs_type; + # Latency type latency_device, dev_type; diff --git a/sepolicy/vendor/genfs_contexts b/sepolicy/vendor/genfs_contexts index e546616..6823029 100644 --- a/sepolicy/vendor/genfs_contexts +++ b/sepolicy/vendor/genfs_contexts @@ -11,6 +11,9 @@ genfscon sysfs /devices/platform/11012000.spi2/spi_master/spi2/spi2.0/authen_fd genfscon sysfs /devices/platform/11012000.spi2/spi_master/spi2/spi2.0/authen_fd/performance u:object_r:sysfs_fingerprint:s0 genfscon sysfs /devices/platform/fingerprint u:object_r:sysfs_fingerprint:s0 +# Graphics +genfscon sysfs /devices/platform/13040000.mali u:object_r:sysfs_mali:s0 + # Health genfscon sysfs /devices/platform/mt_charger/power_supply/ac u:object_r:vendor_sysfs_ac_supply:s0 genfscon sysfs /devices/platform/mt_charger/power_supply/usb u:object_r:vendor_sysfs_usb_supply:s0 diff --git a/sepolicy/vendor/hal_power_default.te b/sepolicy/vendor/hal_power_default.te index 453ddda..fa7c279 100644 --- a/sepolicy/vendor/hal_power_default.te +++ b/sepolicy/vendor/hal_power_default.te @@ -21,6 +21,8 @@ allow hal_power_default sysfs_mtk_cpufreq:file rw_file_perms; # Set GPU frequency allow hal_power_default sysfs_mtk_gpufreq:file rw_file_perms; +allow hal_power_default sysfs_mali:dir r_dir_perms; +allow hal_power_default sysfs_mali:file rw_file_perms; # Set perfmgr nodes allow hal_power_default proc_perfmgr:dir r_dir_perms;