Add sepolicy for dm backend app

Tracked-On: Signed-off-by: chenyanxzhu <[email protected]>
projectceladon · Aug 16, 2024 · facb64d · facb64d
1 parent 4cbfbd0
commit facb64d
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 0 deletions.
diff --git a/graphics/dm_backend/backend_client_app.te b/graphics/dm_backend/backend_client_app.te
@@ -0,0 +1,10 @@
+type dm_backend_ipc_data_file, file_type, data_file_type;
+type dm_backend_app_data_file, file_type, data_file_type, app_data_file_type;
+type dm_backend_client_app, domain;
+
+#============= dm_backend_client_app ==============
+allow dm_backend_client_app dm_backend_ipc_data_file:dir { add_name remove_name };
+allow dm_backend_client_app dm_backend_ipc_data_file:sock_file { create unlink write };
+
+allow dm_backend_client_app dm_backend_app_data_file:dir create_dir_perms;
+
diff --git a/graphics/dm_backend/file_contexts b/graphics/dm_backend/file_contexts
@@ -0,0 +1,3 @@
+#dm_backend_app /data/vendor/dm_backend_app permission
+/data/vendor/dm_backend_app(/.*)?       u:object_r:dm_backend_ipc_data_file:s0
+
diff --git a/graphics/dm_backend/seapp_contexts b/graphics/dm_backend/seapp_contexts
@@ -0,0 +1 @@
+user=system seinfo=platform name=com.intel.dm_backend domain=dm_backend_client_app type=dm_backend_app_data_file
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,3 @@
		#dm_backend_app /data/vendor/dm_backend_app permission
		/data/vendor/dm_backend_app(/.*)? u:object_r:dm_backend_ipc_data_file:s0
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		user=system seinfo=platform name=com.intel.dm_backend domain=dm_backend_client_app type=dm_backend_app_data_file