sepolicy: Addressing memtrack access to GL mem info
Added new secontext kgsl_debugfs for /sys/kernel/debug/kgsl/proc/.
Granted access to memtrack and system_server domain to read on
this node. Domain denials other than surfaceflinger are suppressed.
Fixes these avc denials seen in user build:
memtrack@1.0-se: type=1400 audit(0.0:46): avc: denied { read }
for uid=1000 name="mem" dev="debugfs" ino=656
scontext=u:r:hal_memtrack_default:s0
tcontext=u:object_r:qti_debugfs:s0 tclass=file permissive=0
GL and EGL memory are now accounted properly when
"dumpsys meminfo -a <pid>" is executed in user build.
CRs-Fixed: 2142195
Change-Id: I6331e6faf68502d5048a7b3da130540a234eb9b4
5 files changed