sepolicy: legacy: perf_hal: allow PerfHal to read SF, hwc thread cgroup

Add rule to allow perf hal to read SurfaceFlinger, hardwarecomposer task's cgroups. Change-Id: I422c991f08011fa15b4617f1146087a5757d5f04 Signed-off-by: chrisl7 <[email protected]> Signed-off-by: Jprimero15 <[email protected]>
AOSPA · Jan 14, 2025 · cbf6f7b · cbf6f7b
1 parent c6d4231
commit cbf6f7b
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/sepolicy/legacy/vendor/common/hal_perf_default.te b/sepolicy/legacy/vendor/common/hal_perf_default.te
@@ -143,6 +143,10 @@ vndbinder_use(vendor_hal_perf);
 
 hal_client_domain(vendor_hal_perf_default, hal_thermal);
 
+allow vendor_hal_perf_default hal_graphics_composer_default:dir search;
+allow vendor_hal_perf_default hal_graphics_composer_default:file { open read };
+allow vendor_hal_perf_default surfaceflinger:dir search;
+allow vendor_hal_perf_default surfaceflinger:file { open read };
 allow vendor_hal_perf_default surfaceflinger:process setsched;
 allow vendor_hal_perf_default hal_graphics_composer_default:process setsched;
 allow vendor_hal_perf_default appdomain:process setsched;