sepolicy: Add a rule to access gpu configuration settings
For all GPU application needs access to /data/vendor/gpu path to
configure the graphics user mode driver. Also it need access to
sysfs kgsl snapshot path for getting the gpu snapshot dump and
timestamp information.
Also Addressing following denials :
comm.adrenotest: type=1400 audit(0.0:204): avc: denied { open } for
path="/data/misc/gpu/esx_config.txt" dev="dm-0" ino=148200
scontext=u:r:untrusted_app_25:s0:c512,c768
tcontext=u:object_r:system_data_file:s0 tclass=file permissive=0
comm.adrenotest: type=1400 audit(0.0:205): avc: denied { open } for
path="/data/misc/gpu/adreno_config.txt" dev="dm-0" ino=148213
scontext=u:r:untrusted_app_25:s0:c512,c768
tcontext=u:object_r:system_data_file:s0 tclass=file permissive=0
comm.adrenotest: type=1400 audit(0.0:175): avc: denied { search } for
name="kgsl-3d0" dev="sysfs" ino=35267
scontext=u:r:untrusted_app_25:s0:c512,c768
tcontext=u:object_r:sysfs_kgsl:s0 tclass=dir permissive=0
CRs-Fixed: 2081160
Change-Id: Iee9cf0a9cad71856db12c31f80b1a87b79ddd42f
3 files changed