Skip to content
Snippets Groups Projects
Commit fe84716c authored by Alex Klyubin's avatar Alex Klyubin Committed by android-build-merger
Browse files

Apps and system_server are gralloc HAL clients 

am: 5007c10a

Change-Id: I7a35f4749c90e08632bb0013e99624cd34920d9b
parents 204da471 5007c10a
Branches
No related tags found
No related merge requests found
Show whitespace changes
Inline Side-by-side
private/app.te
+ 0
− 3
View file @ fe84716c
...@@ -270,9 +270,6 @@ auditallow { appdomain userdebug_or_eng(`-su') } ion_device:chr_file { write app ...@@ -270,9 +270,6 @@ auditallow { appdomain userdebug_or_eng(`-su') } ion_device:chr_file { write app
# TODO(b/36375899) replace with hal_client_domain for mediacodec (hal_omx) # TODO(b/36375899) replace with hal_client_domain for mediacodec (hal_omx)
get_prop({ appdomain -isolated_app }, hwservicemanager_prop); get_prop({ appdomain -isolated_app }, hwservicemanager_prop);
# Allow app to access the graphic allocator HAL
binder_call({ appdomain -isolated_app }, hal_graphics_allocator)
# Allow app access to mediacodec (IOMX HAL) # Allow app access to mediacodec (IOMX HAL)
binder_call({ appdomain -isolated_app }, mediacodec) binder_call({ appdomain -isolated_app }, mediacodec)
......
private/system_server.te
+ 1
− 2
View file @ fe84716c
...@@ -175,7 +175,7 @@ hal_client_domain(system_server, hal_contexthub) ...@@ -175,7 +175,7 @@ hal_client_domain(system_server, hal_contexthub)
hal_client_domain(system_server, hal_fingerprint) hal_client_domain(system_server, hal_fingerprint)
binder_call(system_server, hal_gnss) binder_call(system_server, hal_gnss)
hal_client_domain(system_server, hal_gnss) hal_client_domain(system_server, hal_gnss)
binder_call(system_server, hal_graphics_allocator) hal_client_domain(system_server, hal_graphics_allocator)
binder_call(system_server, hal_ir) binder_call(system_server, hal_ir)
hal_client_domain(system_server, hal_ir) hal_client_domain(system_server, hal_ir)
binder_call(system_server, hal_light) binder_call(system_server, hal_light)
...@@ -627,7 +627,6 @@ allow system_server preloads_media_file:dir { r_dir_perms write remove_name rmdi ...@@ -627,7 +627,6 @@ allow system_server preloads_media_file:dir { r_dir_perms write remove_name rmdi
r_dir_file(system_server, cgroup) r_dir_file(system_server, cgroup)
allow system_server ion_device:chr_file r_file_perms; allow system_server ion_device:chr_file r_file_perms;
allow system_server hal_graphics_allocator:fd use;
r_dir_file(system_server, proc) r_dir_file(system_server, proc)
r_dir_file(system_server, proc_meminfo) r_dir_file(system_server, proc_meminfo)
......
private/technical_debt.cil
+ 5
− 0
View file @ fe84716c
...@@ -12,6 +12,11 @@ ...@@ -12,6 +12,11 @@
(typeattributeset hal_allocator_client ((and (appdomain) ((not (isolated_app)))))) (typeattributeset hal_allocator_client ((and (appdomain) ((not (isolated_app))))))
(typeattributeset halclientdomain (hal_allocator_client)) (typeattributeset halclientdomain (hal_allocator_client))
; Apps, except isolated apps, are clients of Graphics Allocator HAL
; Unfortunately, we can't currently express this in module policy language:
; typeattribute { appdomain -isolated_app } hal_graphics_allocator_client;
(typeattributeset hal_graphics_allocator_client ((and (appdomain) ((not (isolated_app))))))
; Domains hosting Camera HAL implementations are clients of Allocator HAL ; Domains hosting Camera HAL implementations are clients of Allocator HAL
; Unfortunately, we can't currently express this in module policy language: ; Unfortunately, we can't currently express this in module policy language:
; typeattribute hal_camera hal_allocator_client; ; typeattribute hal_camera hal_allocator_client;
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment