You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
79 lines
2.5 KiB
79 lines
2.5 KiB
# ==============================================
|
|
# MTK Policy Rule
|
|
# ==============================================
|
|
|
|
# Data : WK14.42
|
|
# Operation : Migration
|
|
# Purpose : Video playback
|
|
allow surfaceflinger sw_sync_device:chr_file rw_file_perms;
|
|
|
|
# Date : WK16.33
|
|
# Purpose: Allow to access ged for gralloc_extra functions
|
|
allow surfaceflinger proc_ged:file rw_file_perms;
|
|
allowxperm surfaceflinger proc_ged:file ioctl { proc_ged_ioctls };
|
|
|
|
# Date : W16.42
|
|
# Operation : Integration
|
|
# Purpose : DRM / DRI GPU driver required
|
|
|
|
allow surfaceflinger gpu_device:dir search;
|
|
|
|
# Date : WK17.12
|
|
# Purpose: Fix bootup fail
|
|
allow surfaceflinger proc_bootprof:file r_file_perms;
|
|
|
|
#============= surfaceflinger ==============
|
|
allow surfaceflinger debugfs_ion:dir search;
|
|
|
|
# Date : WK17.30
|
|
# Operation : O Migration
|
|
# Purpose: Allow to access cmdq driver
|
|
allow surfaceflinger mtk_cmdq_device:chr_file r_file_perms;
|
|
allow surfaceflinger mtk_mdp_device:chr_file r_file_perms;
|
|
allow surfaceflinger mtk_mdp_sync:chr_file r_file_perms;
|
|
allow surfaceflinger sysfs_boot_mode:file r_file_perms;
|
|
|
|
# Date : W17.39
|
|
# Perform Binder IPC.
|
|
binder_use(surfaceflinger)
|
|
binder_call(surfaceflinger, binderservicedomain)
|
|
binder_call(surfaceflinger, appdomain)
|
|
binder_call(surfaceflinger, mtkbootanimation)
|
|
binder_service(surfaceflinger)
|
|
|
|
allow surfaceflinger mtkbootanimation:dir search;
|
|
allow surfaceflinger mtkbootanimation:file { read getattr open };
|
|
|
|
# Date : W17.43
|
|
# Operation : Migration
|
|
# Purpose: Allow to access perfmgr
|
|
allow surfaceflinger proc_perfmgr:dir {read search};
|
|
allow surfaceflinger proc_perfmgr:file {open read ioctl};
|
|
allowxperm surfaceflinger proc_perfmgr:file ioctl {
|
|
PERFMGR_FPSGO_QUEUE
|
|
PERFMGR_FPSGO_DEQUEUE
|
|
PERFMGR_FPSGO_QUEUE_CONNECT
|
|
PERFMGR_FPSGO_BQID
|
|
PERFMGR_FPSGO_VSYNC
|
|
};
|
|
|
|
# Date : WK17.43
|
|
# Operation : Debug
|
|
# Purpose: Allow to dump HWC backtrace
|
|
get_prop(surfaceflinger, vendor_mtk_graphics_hwc_pid_prop)
|
|
get_prop(surfaceflinger, vendor_mtk_graphics_hwc_latch_unsignaled_prop)
|
|
get_prop(surfaceflinger, vendor_mtk_graphics_hwc_validate_separate_prop)
|
|
allow surfaceflinger hal_graphics_composer_default:dir search;
|
|
allow surfaceflinger hal_graphics_composer_default:lnk_file read;
|
|
dontaudit surfaceflinger hal_graphics_composer_default:file r_file_perms;
|
|
|
|
# Date : WK19.4
|
|
# Operation : P Migration
|
|
# Purpose: Allow to access /dev/mdp_device driver
|
|
allow surfaceflinger mdp_device:chr_file rw_file_perms;
|
|
|
|
# Date : WK18.43
|
|
# Operation : HDR
|
|
# Purpose: Allow to skip aosp hdr solution
|
|
get_prop(surfaceflinger, vendor_mtk_graphics_hwc_hdr_prop)
|