Carter Hsu e23d5c44d0 Allow hal_audio_default to access DMA and TPU property
12-19 13:46:27.396000  1041  4222  4222 W gsenet/4949: type=1400 audit(0.0:51): avc:  denied  { read } for  name="u:object_r:vendor_edgetpu_runtime_prop:s0" dev="tmpfs" ino=399 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:vendor_edgetpu_runtime_prop:s0 tclass=file permissive=0

12-19 13:46:27.396000  1041  4222  4222 I auditd  : type=1400 audit(0.0:52): avc:  denied  { read } for  comm="gsenet/4949" name="system" dev="tmpfs" ino=1217 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:dmabuf_system_heap_device:s0 tclass=chr_file permissive=0

12-19 13:46:27.396000  1041  4222  4222 W gsenet/4949: type=1400 audit(0.0:52): avc:  denied  { read } for  name="system" dev="tmpfs" ino=1217 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:dmabuf_system_heap_device:s0 tclass=chr_file permissive=0

Bug: 317032803
Test: Verified by test build
Change-Id: Ifc2b720615b2ee9b74de163c128962411bbe0d4e
Signed-off-by: Carter Hsu <carterhsu@google.com>
2023-12-22 04:52:47 +00:00

19 lines
864 B
Plaintext

# Allow the audio hal to access the EdgeTPU service and the
# Android shared memory allocated by the EdgeTPU service for
# on-device compilation.
allow hal_audio_default edgetpu_device:chr_file rw_file_perms;
allow hal_audio_default edgetpu_vendor_service:service_manager find;
binder_call(hal_audio_default, edgetpu_vendor_server)
# Allow edgetpu_app_service as well, due to the EdgeTpu metrics logging
# library has a dependency on edgetpu_app_service, see b/275016466.
allow hal_audio_default edgetpu_app_service:service_manager find;
binder_call(hal_audio_default, edgetpu_app_server)
# Allow audio HAL to read tflite Darwinn delegate properties
get_prop(hal_audio_default, vendor_tflite_delegate_prop)
get_prop(hal_audio_default, vendor_edgetpu_runtime_prop)
# Allow DMA Buf access.
allow hal_audio_default dmabuf_system_heap_device:chr_file r_file_perms;