Avijit Kanti Das | d01b3b3 | 2014-10-21 10:30:09 -0700 | [diff] [blame] | 1 | r_dir_file(domain, sysfs_socinfo); |
| 2 | r_dir_file(domain, sysfs_esoc); |
Biswajit Paul | d8ab626 | 2014-10-23 16:27:42 -0700 | [diff] [blame] | 3 | r_dir_file(domain, sysfs_ssr); |
Avijit Kanti Das | 441bad4 | 2015-05-12 14:07:41 -0700 | [diff] [blame] | 4 | |
| 5 | dontaudit domain kernel:system module_request; |
Avijit Kanti Das | b4d421f | 2015-08-21 16:55:01 -0700 | [diff] [blame] | 6 | |
| 7 | # Allow all domains read access to sysfs_thermal |
| 8 | r_dir_file(domain, sysfs_thermal); |
Biswajit Paul | a6c1a93 | 2017-03-06 15:42:55 -0800 | [diff] [blame] | 9 | |
| 10 | # Allow domain to read /vendor -> /system/vendor |
| 11 | allow domain system_file:lnk_file getattr; |
Biswajit Paul | 700ef6a | 2017-03-31 11:22:34 -0700 | [diff] [blame] | 12 | |
Brahmaji K | fab6271 | 2017-08-24 15:09:40 +0530 | [diff] [blame] | 13 | allow domain debug_gralloc_prop:file r_file_perms; |
Biswajit Paul | 700ef6a | 2017-03-31 11:22:34 -0700 | [diff] [blame] | 14 | |
sahil madeka | a3608c9 | 2017-05-12 15:41:40 -0700 | [diff] [blame] | 15 | not_full_treble(`allow domain vendor_file:dir r_dir_perms;') |
Alex Sarraf | 212502d | 2017-05-04 17:33:19 -0700 | [diff] [blame] | 16 | |
Biswajit Paul | 700ef6a | 2017-03-31 11:22:34 -0700 | [diff] [blame] | 17 | # Added now for smoother UI |
| 18 | # Remove this after HIDL implementation |
| 19 | userdebug_or_eng(` |
| 20 | allow domain hal_graphics_composer:fd use; |
| 21 | ') |
jaihindy | a414e5c | 2017-07-06 18:56:13 +0530 | [diff] [blame] | 22 | dontaudit domain persist_dpm_prop:file r_file_perms; |
Hareesh Gundu | 6d32f05 | 2017-09-25 21:13:33 +0530 | [diff] [blame] | 23 | |
| 24 | allow domain sysfs_kgsl_gpuclk:file r_file_perms; |
| 25 | allow domain sysfs_kgsl_gpuclk:lnk_file r_file_perms; |
Jaihind Yadav | a821847 | 2017-11-10 14:07:50 +0530 | [diff] [blame] | 26 | allow domain qti_debugfs:dir search; |
Archana Sriram | 8849370 | 2017-12-06 17:16:58 +0530 | [diff] [blame] | 27 | allow domain kgsl_debugfs:dir search; |