Biswajit Paul | 977e506 | 2014-10-14 20:34:55 -0700 | [diff] [blame] | 1 | allow surfaceflinger sysfs_graphics:file rw_file_perms; |
Avijit Kanti Das | 808ae2f | 2014-10-21 17:11:11 -0700 | [diff] [blame] | 2 | |
Nitesh Gupta | 29d4b6a | 2015-01-16 17:34:55 +0530 | [diff] [blame] | 3 | # Allow reading/writing to 'persist/display/*' |
| 4 | allow surfaceflinger persist_display_file:dir rw_dir_perms; |
| 5 | allow surfaceflinger persist_display_file:file create_file_perms; |
| 6 | |
| 7 | # Allow only directory search to '/persist' |
| 8 | allow surfaceflinger persist_file:dir search; |
| 9 | |
c_yongga | ce732a2 | 2016-01-18 12:58:51 +0800 | [diff] [blame] | 10 | # Use open file provided by poweroffhandler |
| 11 | binder_call(surfaceflinger, poweroffhandler); |
| 12 | |
Tushar Janefalkar | 87c1f92 | 2014-10-21 15:16:12 -0700 | [diff] [blame] | 13 | binder_call(surfaceflinger, location) |
Dinesh K Garg | 09a2f19 | 2014-10-31 16:28:22 -0700 | [diff] [blame] | 14 | binder_call(surfaceflinger, tee) |
Dilip Gudlur | 500f911 | 2014-12-27 23:42:59 -0800 | [diff] [blame] | 15 | |
Naseer Ahmed | 04dbc84 | 2017-11-02 19:20:16 -0400 | [diff] [blame] | 16 | hal_client_domain(surfaceflinger, hal_display_config) |
| 17 | |
Bruno Martins | f689f7f | 2018-09-16 23:23:14 +0100 | [diff] [blame] | 18 | # access to /data/vendor/display for dumping input frames |
| 19 | allow surfaceflinger display_vendor_data_file:dir create_dir_perms; |
| 20 | allow surfaceflinger display_vendor_data_file:file create_file_perms; |
Biswajit Paul | 28439f9 | 2015-07-15 13:28:27 -0700 | [diff] [blame] | 21 | |
| 22 | # Allows access to dpps daemon in calibration mode |
Ravi Kumar Siddojigari | c7def12 | 2017-06-13 00:49:19 +0530 | [diff] [blame] | 23 | #unix_socket_connect(surfaceflinger, pps, mm-pp-daemon) |
Avijit Kanti Das | e5656e3 | 2015-09-09 16:53:28 -0700 | [diff] [blame] | 24 | |
| 25 | r_dir_file(surfaceflinger, firmware_file) |
taozhang | af844b8 | 2015-11-04 14:50:25 +0800 | [diff] [blame] | 26 | |
| 27 | #Allow access to fastmmi |
| 28 | binder_call(surfaceflinger, mmi) |
Suman Mukherjee | b91bb74 | 2016-08-03 14:16:23 +0530 | [diff] [blame] | 29 | |
| 30 | #Allow access to cameraserver service |
| 31 | allow surfaceflinger cameraserver_service:service_manager find; |
Abhinav Sohane | 1124019 | 2017-09-27 12:20:50 +0530 | [diff] [blame] | 32 | |
| 33 | #Allow access to binder callback's to camera hal |
| 34 | binder_call(surfaceflinger, hal_camera_default) |
| 35 | |
Ethan Chen | fff950d | 2018-09-24 23:28:05 -0700 | [diff] [blame] | 36 | allow surfaceflinger qdisplay_service:service_manager { add find }; |
| 37 | |
Biswajit Paul | 277acbb | 2016-07-20 12:02:14 -0700 | [diff] [blame] | 38 | #diag |
| 39 | userdebug_or_eng(` |
| 40 | diag_use(surfaceflinger) |
| 41 | ') |
Biswajit Paul | f63bd14 | 2017-03-16 16:41:02 -0700 | [diff] [blame] | 42 | |
| 43 | allow surfaceflinger { |
| 44 | debug_gralloc_prop |
| 45 | sdm_idle_time_prop |
Biswajit Paul | f63bd14 | 2017-03-16 16:41:02 -0700 | [diff] [blame] | 46 | }:file r_file_perms; |
Sahil Madeka | 1dd4eee | 2017-05-01 16:45:49 -0700 | [diff] [blame] | 47 | |
| 48 | #set qemu.gles prop |
| 49 | set_prop(surfaceflinger, qemu_gles_prop) |