garnet: sepolicy: Solve vendor_hal_perf_default denials

avc: denied { search } for name=1567 dev=proc ino=60290820 scontext=u:r:vendor_hal_perf_default:s0 tcontext=u:r:hal_graphics_composer_default:s0 tclass=dir permissive=0 avc: denied { getpgid } for scontext=u:r:vendor_hal_perf_default:s0 tcontext=u:r:hal_graphics_composer_default:s0 tclass=process permissive=0 avc: denied { read } for name="cpuset" dev="proc" ino=937978 scontext=u:r:vendor_hal_perf_default:s0 tcontext=u:r:hal_graphics_composer_default:s0 tclass=file permissive=0
royweisfeld · Jan 18, 2025 · 68dee0d · 68dee0d
1 parent df2046c
commit 68dee0d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/sepolicy/vendor/vendor_hal_perf_default.te b/sepolicy/vendor/vendor_hal_perf_default.te
@@ -0,0 +1,3 @@
+allow vendor_hal_perf_default hal_graphics_composer_default:dir { search };
+allow vendor_hal_perf_default hal_graphics_composer_default:process { getpgid };
+allow vendor_hal_perf_default hal_graphics_composer_default:file { read };