commit f687b5929f52a58ddc34902ccc6569abe95cafea
author Vinil Cheeramvelil <vinil.cheeramvelil@intel.com> Mon Jun 01 12:34:35 2015 -0700
committer Pat Tjin <pattjin@google.com> Tue Jun 16 23:10:54 2015 +0000
tree 71913c659c978f3b5a123d4a5a28941158f442a4
parent fab777ec0ad47ed26298286a39e49fd8ccf2af8c

Additional SELinux permissions for DDK 1.5

Bug: 20914944
Bug: 20302101
Bug: 19412176
Bug: 21265944
Change-Id: I308e49579c4467d87daa7a48d149a0532a8e29d5
Signed-off-by: Vinil Cheeramvelil <vinil.cheeramvelil@intel.com>

sepolicy/pvrsrvctl.te

diff --git a/sepolicy/pvrsrvctl.te b/sepolicy/pvrsrvctl.te
index ee5f048..84ba81b 100644
--- a/sepolicy/pvrsrvctl.te
+++ b/sepolicy/pvrsrvctl.te
@@ -9,3 +9,10 @@
 
 # allow graphics driver initialization
 allow pvrsrvctl self:capability sys_admin;
+
+# enable pipe communication between appdomain processes and
+# surfaceflinger for gralloc subchannel feature (dynamic fbc)
+allow bootanim surfaceflinger:fifo_file rw_file_perms;
+allow system_server surfaceflinger:fifo_file rw_file_perms;
+allow appdomain surfaceflinger:fifo_file rw_file_perms;
+allow mediaserver surfaceflinger:fifo_file rw_file_perms;