Carter Hsu fd652ae423 audio: allow hal_audio_default to allocate graphic buffer
12-04 10:00:07.379   481   481 E SELinux : avc:  denied  { find } for interface=android.hardware.graphics.mapper::IMapper sid=u:r:hal_audio_default:s0 pid=13283 scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:hal_graphics_mapper_hwservice:s0 tclass=hwservice_manager permissive=0

12-04 10:00:07.409   480   480 E SELinux : avc:  denied  { find } for pid=13283 uid=1041 name=android.hardware.graphics.allocator.IAllocator/default scontext=u:r:hal_audio_default:s0 tcontext=u:object_r:hal_graphics_allocator_service:s0 tclass=service_manager permissive=0

Bug: 314850759
Test: verified by test build
Change-Id: Icb2ecd6d3096455244dc58b5aadf8c562cb02470
Signed-off-by: Carter Hsu <carterhsu@google.com>
2023-12-05 01:01:13 +00:00

37 lines
1.4 KiB
Plaintext

allow hal_audio_default audio_vendor_data_file:dir rw_dir_perms;
allow hal_audio_default audio_vendor_data_file:file create_file_perms;
r_dir_file(hal_audio_default, aoc_audio_file);
r_dir_file(hal_audio_default, mnt_vendor_file);
r_dir_file(hal_audio_default, persist_audio_file);
allow hal_audio_default persist_file:dir search;
allow hal_audio_default aoc_device:file rw_file_perms;
allow hal_audio_default aoc_device:chr_file rw_file_perms;
allow hal_audio_default amcs_device:file rw_file_perms;
allow hal_audio_default amcs_device:chr_file rw_file_perms;
allow hal_audio_default sysfs_pixelstats:file rw_file_perms;
#allow access to aoc and kernel boottime
allow hal_audio_default sysfs_aoc:dir { search };
allow hal_audio_default sysfs_aoc_boottime:file r_file_perms;
#allow access to DMABUF Heaps for AAudio API
allow hal_audio_default dmabuf_heap_device:chr_file r_file_perms;
set_prop(hal_audio_default, vendor_audio_prop);
hal_client_domain(hal_audio_default, hal_health);
hal_client_domain(hal_audio_default, hal_thermal);
allow hal_audio_default fwk_sensor_hwservice:hwservice_manager find;
hal_client_domain(hal_audio_default, hal_graphics_allocator);
userdebug_or_eng(`
allow hal_audio_default self:unix_stream_socket create_stream_socket_perms;
allow hal_audio_default audio_vendor_data_file:sock_file { create unlink };
')
wakelock_use(hal_audio_default);