diff options
Diffstat (limited to 'shared/sepolicy/vendor/file_contexts')
| -rw-r--r-- | shared/sepolicy/vendor/file_contexts | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/shared/sepolicy/vendor/file_contexts b/shared/sepolicy/vendor/file_contexts index 2f3a4857c..08e91ab93 100644 --- a/shared/sepolicy/vendor/file_contexts +++ b/shared/sepolicy/vendor/file_contexts @@ -74,6 +74,16 @@ # qemu (riscv64) /sys/devices/platform/soc/30000000.pci/pci0000:00/0000:00:[0-9a-fA-F]{2}.0/virtio[0-9]+/(block|ndbus[0-9]+)(/.*)? u:object_r:sysfs_devices_block:s0 +# virtio-gpu +# VMM is configured to always assign the GPU to PCI address 00:02.0 (if present). +# LINT.IfChange(virtio_gpu_pci_address) +/sys/devices/(.*/)?pci0000:00/0000:00:02.0/device(/.*)? u:object_r:sysfs_gpu:s0 +/sys/devices/(.*/)?pci0000:00/0000:00:02.0/subsystem_device(/.*)? u:object_r:sysfs_gpu:s0 +/sys/devices/(.*/)?pci0000:00/0000:00:02.0/subsystem_vendor(/.*)? u:object_r:sysfs_gpu:s0 +/sys/devices/(.*/)?pci0000:00/0000:00:02.0/uevent(/.*)? u:object_r:sysfs_gpu:s0 +/sys/devices/(.*/)?pci0000:00/0000:00:02.0/vendor(/.*)? u:object_r:sysfs_gpu:s0 +# LINT.ThenChange(../../../host/libs/vm_manager/vm_manager.h:virtio_gpu_pci_address) + ############################# # Vendor files # |