1 # Binder access (for display.qservice) 2 vndbinder_use(hal_graphics_composer_default) 3 allow hal_graphics_composer_default qdisplay_service:service_manager { add find }; 4 5 allow hal_graphics_composer_default persist_display_file:dir search; 6 allow hal_graphics_composer_default persist_display_file:file r_file_perms; 7 8 allow hal_graphics_composer_default sysfs_camera:dir search; 9 allow hal_graphics_composer_default sysfs_camera:file r_file_perms; 10 allow hal_graphics_composer_default sysfs_msm_subsys:dir search; 11 allow hal_graphics_composer_default sysfs_msm_subsys:file r_file_perms; 12 allow hal_graphics_composer_default sysfs_mdss_mdp_caps:file r_file_perms; 13 allow hal_graphics_composer_default persist_file:dir search; 14 15 allow hal_graphics_composer_default hal_graphics_mapper_hwservice:hwservice_manager find; 16 17 r_dir_file(hal_graphics_composer_default, sysfs_leds) 18 19 # TODO(b/37666508): Remove the following line upon resolution of the bug 20 allow hal_graphics_composer_default video_device:chr_file rw_file_perms; 21 22 # HWC_UeventThread 23 allow hal_graphics_composer_default self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl; 24 25 # Access /sys/devices/virtual/graphics/fb0 26 r_dir_file(hal_graphics_composer_default, sysfs_type) 27 28 allow hal_graphics_composer_default display_vendor_data_file:dir create_dir_perms; 29 allow hal_graphics_composer_default display_vendor_data_file:file create_file_perms; 30 31 userdebug_or_eng(` 32 allow hal_graphics_composer_default debugfs_mdp:dir r_dir_perms; 33 allow hal_graphics_composer_default debugfs_mdp:file r_file_perms; 34 ') 35