commit a924a208a8b4a0951a56e50e59456b499c58dbb9
author Roman Kiryanov <rkir@google.com> Fri Dec 06 15:12:09 2019 -0800
committer Roman Kiryanov <rkir@google.com> Fri Dec 06 15:12:09 2019 -0800
tree 363f3172529310e7e32b23e225f38030af3cf761
parent 631888eadadabf9929c27a95b7720b1eea2f6482

Allow HWC2 to talk to IAllocator

avc:  denied  { find } for interface=android.hardware.graphics.allocator::IAllocator sid=u:r:hal_graphics_composer_default:s0 pid=2351 scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:hal_graphics_allocator_hwservice:s0 tclass=hwservice_manager permissive=0

Bug: 145244672
Test: boot
Change-Id: I2101d689c5a091c3240a2872915e7c9f8849bf0b
Signed-off-by: Roman Kiryanov <rkir@google.com>

sepolicy/common/hal_graphics_composer_default.te

diff --git a/sepolicy/common/hal_graphics_composer_default.te b/sepolicy/common/hal_graphics_composer_default.te
index 3b0c862..ba7ca64 100644
--- a/sepolicy/common/hal_graphics_composer_default.te
+++ b/sepolicy/common/hal_graphics_composer_default.te
@@ -1,4 +1,6 @@
 #============= hal_graphics_composer_default ==============
+hal_client_domain(hal_graphics_composer_default, hal_graphics_allocator);
+
 allow hal_graphics_composer_default vndbinder_device:chr_file { ioctl open read write map };
 allow hal_graphics_composer_default graphics_device:chr_file { ioctl open read write map };
 allow hal_graphics_composer_default gpu_device:chr_file { ioctl open read write map };