blob: c2da12455e2d1af92c2dc5c6be117bd64b9a2326 (
plain)
1
2
3
4
5
6
7
8
9
10
11
|
type debugfs_kgsl, debugfs_type, fs_type;
allow domain debugfs_kgsl:dir search;
allow hal_memtrack debugfs_kgsl:dir search;
allow hal_memtrack debugfs_kgsl:file { open read getattr };
# Memtrack reads proc/<pid>/cmdline to check if process is surfaceflinger.
# Grant access if that's the case; don't log denials for other processes.
allow hal_memtrack surfaceflinger:file read;
dontaudit hal_memtrack { domain -surfaceflinger}:file read;
|
