garnet: sepolicy: Allow hal_perf to get attributes from proc files

- avc: denied { getattr } for path="/proc/1632/cpuset" dev="proc" ino=118908 scontext=u:r:vendor_hal_perf_default:s0 tcontext=u:r:hal_graphics_composer_default:s0 tclass=file permissive=0 Signed-off-by: kleidione <kleidione@gmail.com>
royweisfeld · Jan 18, 2025 · 65dfac6 · 65dfac6
1 parent a034570
commit 65dfac6
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/sepolicy/vendor/vendor_hal_perf_default.te b/sepolicy/vendor/vendor_hal_perf_default.te
@@ -1,3 +1,4 @@
 allow vendor_hal_perf_default hal_graphics_composer_default:dir { search };
 allow vendor_hal_perf_default hal_graphics_composer_default:process { signal getpgid };
-allow vendor_hal_perf_default hal_graphics_composer_default:file { open read write };
+allow vendor_hal_perf_default hal_graphics_composer_default:file { open read write getattr };
+allow vendor_hal_perf_default proc_type:file { getattr };