summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorWilson Sung <wilsonsung@google.com>2022-05-13 20:43:25 +0800
committerJohnny Lee <johnnlee@google.com>2022-05-25 10:20:58 +0000
commit2c8db88ecee6917844a7bc717c0e8bebc0a62c33 (patch)
tree6e1f556437030178dd4d3b61cba812455ee1bd7c
parentc1f7a372234b4688949f2f9e8c645d7e306345c8 (diff)
downloadsunfish-sepolicy-2c8db88ecee6917844a7bc717c0e8bebc0a62c33.tar.gz
sepolicy_vndr: Add shell permission to /sys/class/kgsl/kgsl-3d0/perfcounterandroid13-dev
Allow shell users to have permission to update sysfs node /sys/class/kgsl/kgsl-3d0/perfcounter Bug: 193434313 Change-Id: Id964c20d49b21a9a21a19d86eed46b9ca4ee9138
-rw-r--r--vendor/qcom/common/file.te1
-rw-r--r--vendor/qcom/common/genfs_contexts1
-rw-r--r--vendor/qcom/common/shell.te3
3 files changed, 5 insertions, 0 deletions
diff --git a/vendor/qcom/common/file.te b/vendor/qcom/common/file.te
index 23073eb..8a72cea 100644
--- a/vendor/qcom/common/file.te
+++ b/vendor/qcom/common/file.te
@@ -106,6 +106,7 @@ type nfc_vendor_data_file, file_type, data_file_type;
type sysfs_kgsl, sysfs_type, fs_type;
type sysfs_kgsl_proc, sysfs_type, fs_type;
type sysfs_kgsl_snapshot, sysfs_type, fs_type;
+type sysfs_kgsl_shell, sysfs_type, fs_type;
type sysfs_securetouch, fs_type, sysfs_type;
type sysfs_data, fs_type, sysfs_type;
type sysfs_diag, fs_type, sysfs_type;
diff --git a/vendor/qcom/common/genfs_contexts b/vendor/qcom/common/genfs_contexts
index d8158ec..6ea25b6 100644
--- a/vendor/qcom/common/genfs_contexts
+++ b/vendor/qcom/common/genfs_contexts
@@ -6,6 +6,7 @@ genfscon sysfs /class/uio
genfscon sysfs /devices/virtual/kgsl/kgsl/proc u:object_r:sysfs_kgsl_proc:s0
genfscon sysfs /devices/platform/soc/0.qcom,rmtfs_sharedmem u:object_r:sysfs_rmtfs:s0
genfscon sysfs /devices/platform/soc/soc:qcom,kgsl-hyp u:object_r:sysfs_msm_subsys:s0
+genfscon sysfs /devices/platform/soc/5000000.qcom,kgsl-3d0/kgsl/kgsl-3d0/perfcounter u:object_r:sysfs_kgsl_shell:s0
genfscon sysfs /devices/platform/soc/soc:qcom,spss_utils u:object_r:sysfs_spss:s0
genfscon sysfs /bus/esoc u:object_r:sysfs_esoc:s0
genfscon sysfs /bus/msm_subsys u:object_r:sysfs_msm_subsys:s0
diff --git a/vendor/qcom/common/shell.te b/vendor/qcom/common/shell.te
new file mode 100644
index 0000000..cd0e4a4
--- /dev/null
+++ b/vendor/qcom/common/shell.te
@@ -0,0 +1,3 @@
+# allow shell users to control kgsl perfcounters
+allow shell sysfs_kgsl_shell:file rw_file_perms;
+allow shell sysfs_msm_subsys:dir r_dir_perms;