diff --git a/edgetpu/sepolicy/edgetpu_dba_service.te b/edgetpu/sepolicy/edgetpu_dba_service.te index 1c30b76..f6ecd09 100644 --- a/edgetpu/sepolicy/edgetpu_dba_service.te +++ b/edgetpu/sepolicy/edgetpu_dba_service.te @@ -49,3 +49,7 @@ get_prop(edgetpu_dba_server, vendor_edgetpu_runtime_prop) get_prop(edgetpu_dba_server, vendor_hetero_runtime_prop) # Allow EdgeTPU DBA service to read EdgeTPU CPU scheduler properties get_prop(edgetpu_dba_server, vendor_edgetpu_cpu_scheduler_prop) + +# Allow DMA Buf access. +allow edgetpu_dba_server dmabuf_system_heap_device:chr_file r_file_perms; + diff --git a/edgetpu/sepolicy/hal_neuralnetworks_darwinn.te b/edgetpu/sepolicy/hal_neuralnetworks_darwinn.te index b65a30e..3b2cd4f 100644 --- a/edgetpu/sepolicy/hal_neuralnetworks_darwinn.te +++ b/edgetpu/sepolicy/hal_neuralnetworks_darwinn.te @@ -58,3 +58,7 @@ get_prop(hal_neuralnetworks_darwinn, vendor_tflite_delegate_prop) get_prop(hal_neuralnetworks_darwinn, vendor_edgetpu_runtime_prop) # Allow NNAPI HAL to read hetero runtime properties get_prop(hal_neuralnetworks_darwinn, vendor_hetero_runtime_prop) + +# Allow DMA Buf access. +allow hal_neuralnetworks_darwinn dmabuf_system_heap_device:chr_file r_file_perms; +