diff --git a/mediacodec/samsung/sepolicy/file.te b/mediacodec/samsung/sepolicy/file.te index 99c3b66..2b95172 100644 --- a/mediacodec/samsung/sepolicy/file.te +++ b/mediacodec/samsung/sepolicy/file.te @@ -1 +1,2 @@ type sysfs_mfc, sysfs_type, fs_type; +type sysfs_force_empty, sysfs_type, fs_type; diff --git a/mediacodec/samsung/sepolicy/genfs_contexts b/mediacodec/samsung/sepolicy/genfs_contexts index d44d760..0e48616 100644 --- a/mediacodec/samsung/sepolicy/genfs_contexts +++ b/mediacodec/samsung/sepolicy/genfs_contexts @@ -1 +1,2 @@ genfscon sysfs /devices/platform/mfc/video4linux/video u:object_r:sysfs_mfc:s0 +genfscon sysfs /kernel/vendor_mm/cma/vframe/force_empty u:object_r:sysfs_force_empty:s0 diff --git a/mediacodec/samsung/sepolicy/mediacodec_samsung.te b/mediacodec/samsung/sepolicy/mediacodec_samsung.te index efc83d7..b5bd996 100644 --- a/mediacodec/samsung/sepolicy/mediacodec_samsung.te +++ b/mediacodec/samsung/sepolicy/mediacodec_samsung.te @@ -14,6 +14,9 @@ allow mediacodec_samsung gpu_device:chr_file rw_file_perms; allow mediacodec_samsung sysfs_mfc:file r_file_perms; allow mediacodec_samsung sysfs_mfc:dir r_dir_perms; +allow mediacodec_samsung sysfs_force_empty:dir r_file_perms; +allow mediacodec_samsung sysfs_force_empty:file rw_file_perms; + # can use graphics allocator hal_client_domain(mediacodec_samsung, hal_graphics_allocator)