From c73e82afaf0c00cf4fd08866d79739ed70d36d95 Mon Sep 17 00:00:00 2001 From: SamarV-121 Date: Sat, 17 Jul 2021 19:36:12 +0530 Subject: [PATCH] universal7885: sepolicy: Allow hwc HAL to write ion_device `W composer@2.1-se: type=1400 audit(0.0:144): avc: denied { write } for name="ion" dev="tmpfs" ino=13333 scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:ion_device:s0 tclass=chr_file permissive=0` `E libacryl: Failed to open /dev/ion [Permission denied]` Change-Id: I4f6475d00981a21adddd7a99d5cfb902ee0959da Signed-off-by: SamarV-121 --- sepolicy/vendor/hal_graphics_composer_default.te | 3 +++ 1 file changed, 3 insertions(+) diff --git a/sepolicy/vendor/hal_graphics_composer_default.te b/sepolicy/vendor/hal_graphics_composer_default.te index 6432821..762ade8 100644 --- a/sepolicy/vendor/hal_graphics_composer_default.te +++ b/sepolicy/vendor/hal_graphics_composer_default.te @@ -35,3 +35,6 @@ allow hal_graphics_composer_default sysfs_ss_writable:dir r_dir_perms; allow hal_graphics_composer_default sysfs_ss_writable:file r_file_perms; get_prop(hal_graphics_composer_default, vendor_hwc_prop) + +# /dev/ion/ +allow hal_graphics_composer_default ion_device:chr_file rw_file_perms;