diff --git a/sepolicy/file.te b/sepolicy/file.te index 91b89a3b..1a003394 100644 --- a/sepolicy/file.te +++ b/sepolicy/file.te @@ -14,3 +14,6 @@ type recovery_cache_file, file_type, mlstrustedobject; # Persistent property storage type persist_property_file, file_type; + +# Knobs for LiveDisplay +type livedisplay_sysfs, sysfs_type, file_type; diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts index 4c6baecb..c706a5d7 100644 --- a/sepolicy/file_contexts +++ b/sepolicy/file_contexts @@ -37,3 +37,9 @@ # Persistent properties /persist/properties u:object_r:persist_property_file:s0 + +# LiveDisplay +/sys/devices/virtual/graphics/fb0/aco u:object_r:livedisplay_sysfs:s0 +/sys/devices/virtual/graphics/fb0/cabc u:object_r:livedisplay_sysfs:s0 +/sys/devices/virtual/graphics/fb0/rgb u:object_r:livedisplay_sysfs:s0 +/sys/devices/virtual/graphics/fb0/sre u:object_r:livedisplay_sysfs:s0 diff --git a/sepolicy/livedisplay.te b/sepolicy/livedisplay.te new file mode 100644 index 00000000..a260e079 --- /dev/null +++ b/sepolicy/livedisplay.te @@ -0,0 +1,2 @@ +# Various knobs used by LiveDisplay +allow system_server livedisplay_sysfs:file rw_file_perms; diff --git a/sepolicy/sepolicy.mk b/sepolicy/sepolicy.mk index 382e2414..75f4b090 100644 --- a/sepolicy/sepolicy.mk +++ b/sepolicy/sepolicy.mk @@ -21,6 +21,7 @@ BOARD_SEPOLICY_UNION += \ healthd.te \ hostapd.te \ installd.te \ + livedisplay.te \ mediaserver.te \ netd.te \ property.te \