diff --git a/sepolicy/common/file_contexts b/sepolicy/common/file_contexts index 2ec0e36..38350b2 100644 --- a/sepolicy/common/file_contexts +++ b/sepolicy/common/file_contexts @@ -37,5 +37,11 @@ /sys/module/dhd/parameters/firmware_path u:object_r:sysfs_wifi_writeable:s0 /sys/module/dhd/parameters/nvram_path u:object_r:sysfs_wifi_writeable:s0 +# sysfs - graphics/panel +/sys/class/mhl(/.*)? u:object_r:sysfs_graphics:s0 +/sys/devices/mdp\.[0-9](/.*)? u:object_r:sysfs_graphics:s0 +/sys/devices/virtual/graphics/fb0/csc_cfg u:object_r:sysfs_graphics:s0 +/sys/devices/virtual/lcd/panel(/.*)? u:object_r:sysfs_graphics:s0 + # sysfs - mdnie /sys/devices/virtual/mdnie/mdnie(/.*)? u:object_r:sysfs_mdnie:s0 diff --git a/sepolicy/common/hal_sensors_default.te b/sepolicy/common/hal_sensors_default.te new file mode 100644 index 0000000..8c87d8e --- /dev/null +++ b/sepolicy/common/hal_sensors_default.te @@ -0,0 +1,2 @@ +allow hal_sensors_default sysfs_graphics:dir search; +allow hal_sensors_default sysfs_graphics:file r_file_perms; diff --git a/sepolicy/common/init.te b/sepolicy/common/init.te index 28fce7a..3b46b63 100644 --- a/sepolicy/common/init.te +++ b/sepolicy/common/init.te @@ -1 +1,6 @@ -allow init sysfs_mdnie:file setattr; +allow init sysfs_graphics:file r_file_perms; + +allow init { + sysfs_graphics + sysfs_mdnie +}:file setattr;