summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAmir Samuelov <amirs@codeaurora.org>2020-02-12 15:06:34 +0200
committerGerrit - the friendly Code Review server <code-review@localhost>2020-02-12 07:55:59 -0800
commit00043e0e7ffb336dd86cac63dbf84bdf5b6239fc (patch)
tree56d2ed6fb4b4e7127a2e967f58d07e087391b6bf
parente9337f5441b22f62a09efa5c70552a34d6e8218b (diff)
sepolicy: allow SPU-HAL-service to access spss_utils char device
Allow SPU-HAL-service to send IOCTL to spss_utils kernel driver. Change-Id: I9e6e3f00da04ac86ec22f16b66f5e62909d07d84
-rw-r--r--qva/vendor/common/hal_spu_qti.te3
-rw-r--r--qva/vendor/common/sec_nvm.te2
2 files changed, 4 insertions, 1 deletions
diff --git a/qva/vendor/common/hal_spu_qti.te b/qva/vendor/common/hal_spu_qti.te
index d3664bfc..950e4a20 100644
--- a/qva/vendor/common/hal_spu_qti.te
+++ b/qva/vendor/common/hal_spu_qti.te
@@ -41,6 +41,9 @@ binder_call(hal_spu_server, hal_spu_client)
# Allow the service to be added to hwservice list
hal_attribute_hwservice(hal_spu, hal_spu_hwservice)
+# Allow access to spss_utils device
+allow hal_spu_qti spss_utils_device:chr_file rw_file_perms;
+
# Allow access to spcom devices
allow hal_spu_qti spcom_device:chr_file rw_file_perms;
allow hal_spu_qti skp_device:chr_file rw_file_perms;
diff --git a/qva/vendor/common/sec_nvm.te b/qva/vendor/common/sec_nvm.te
index 93817d43..5a06e348 100644
--- a/qva/vendor/common/sec_nvm.te
+++ b/qva/vendor/common/sec_nvm.te
@@ -41,7 +41,7 @@ allow sec_nvm persist_secnvm_file:file create_file_perms;
allow sec_nvm sysfs_scsi_host:file rw_file_perms;
# Allow access to spss_utils device
-allow spdaemon spss_utils_device:chr_file rw_file_perms;
+allow sec_nvm spss_utils_device:chr_file rw_file_perms;
allow sec_nvm spcom_device:chr_file { getattr rw_file_perms };
allow sec_nvm sp_ssr_device:chr_file rw_file_perms;