From d2baa6e8c55175c0f336d96cb7cf9a8b37750bcc Mon Sep 17 00:00:00 2001 From: UnmoveD Date: Thu, 18 Jul 2024 16:25:27 +0200 Subject: [PATCH] sapphire: sepolicy: Solve vendor_hal_perf_default denials avc: denied { search } for name=1567 dev=proc ino=60290820 scontext=u:r:vendor_hal_perf_default:s0 tcontext=u:r:hal_graphics_composer_default:s0 tclass=dir permissive=0 avc: denied { getpgid } for scontext=u:r:vendor_hal_perf_default:s0 tcontext=u:r:hal_graphics_composer_default:s0 tclass=process permissive=0 avc: denied { read } for name="cpuset" dev="proc" ino=937978 scontext=u:r:vendor_hal_perf_default:s0 tcontext=u:r:hal_graphics_composer_default:s0 tclass=file permissive=0 Signed-off-by: UnmoveD --- sepolicy/vendor/vendor_hal_perf_default.te | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 sepolicy/vendor/vendor_hal_perf_default.te diff --git a/sepolicy/vendor/vendor_hal_perf_default.te b/sepolicy/vendor/vendor_hal_perf_default.te new file mode 100644 index 0000000..5065bd8 --- /dev/null +++ b/sepolicy/vendor/vendor_hal_perf_default.te @@ -0,0 +1,3 @@ +allow vendor_hal_perf_default hal_graphics_composer_default:dir { search }; +allow vendor_hal_perf_default hal_graphics_composer_default:process { getpgid }; +allow vendor_hal_perf_default hal_graphics_composer_default:file { read };