common/domain.te


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

r_dir_file(domain, sysfs_socinfo);
r_dir_file(domain, sysfs_esoc);
r_dir_file(domain, sysfs_ssr);

dontaudit domain kernel:system module_request;

# Allow all domains read access to sysfs_thermal
r_dir_file(domain, sysfs_thermal);

# Allow domain to read /vendor -> /system/vendor
allow domain system_file:lnk_file getattr;

allow domain debug_gralloc_prop:file r_file_perms;

not_full_treble(`allow domain vendor_file:dir r_dir_perms;')

# Added now for smoother UI
# Remove this after HIDL implementation
userdebug_or_eng(`
allow domain hal_graphics_composer:fd use;
')
dontaudit domain persist_dpm_prop:file r_file_perms;

allow domain sysfs_kgsl_gpuclk:file r_file_perms;
allow domain  sysfs_kgsl_gpuclk:lnk_file r_file_perms;
allow domain qti_debugfs:dir search;
allow domain kgsl_debugfs:dir search;