From 604472bce94efef6fdeae8cc795507007c4325b3 Mon Sep 17 00:00:00 2001 From: Giulio Cervera Date: Sat, 26 Apr 2014 16:01:41 +0200 Subject: Initial Shinano import based on rhine-common 7e2a33e --- sepolicy/app.te | 3 +++ sepolicy/device.te | 2 ++ sepolicy/file_contexts | 2 ++ 3 files changed, 7 insertions(+) create mode 100644 sepolicy/app.te create mode 100644 sepolicy/device.te create mode 100644 sepolicy/file_contexts (limited to 'sepolicy') diff --git a/sepolicy/app.te b/sepolicy/app.te new file mode 100644 index 0000000..eb71391 --- /dev/null +++ b/sepolicy/app.te @@ -0,0 +1,3 @@ +# Grant GPU access to all processes started by Zygote. +# They need that to render the standard UI. +allow appdomain gpu_device:chr_file rw_file_perms; diff --git a/sepolicy/device.te b/sepolicy/device.te new file mode 100644 index 0000000..f29322b --- /dev/null +++ b/sepolicy/device.te @@ -0,0 +1,2 @@ +# GPU (used by most UI apps) +type gpu_device, dev_type; diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts new file mode 100644 index 0000000..49aff48 --- /dev/null +++ b/sepolicy/file_contexts @@ -0,0 +1,2 @@ +# GPU device +/dev/kgsl-3d0 u:object_r:gpu_device:s0 -- cgit v1.2.3