Add sepolicy for application rendering setting property

All app need the read/write authorization to the customized property presist.vendor.intel.dGPU.* and persist.vendor.intel.lowPir.* for rendering option. Tracked-On: OAM-122333 Signed-off-by: HeYue <[email protected]> Signed-off-by: jizhenlo <[email protected]>
projectceladon · Aug 6, 2024 · 77c6f8b · 77c6f8b
1 parent c58c37c
commit 77c6f8b
Show file tree

Hide file tree

Showing 7 changed files with 12 additions and 0 deletions.
diff --git a/app_render_setting_property/platform_app.te b/app_render_setting_property/platform_app.te
@@ -0,0 +1 @@
+get_prop(platform_app, vendor_intel_render_selection_prop)
diff --git a/app_render_setting_property/priv_app.te b/app_render_setting_property/priv_app.te
@@ -0,0 +1 @@
+get_prop(priv_app, vendor_intel_render_selection_prop)
diff --git a/app_render_setting_property/property.te b/app_render_setting_property/property.te
@@ -0,0 +1,2 @@
+vendor_public_prop(vendor_intel_render_selection_prop)
+typeattribute vendor_intel_render_selection_prop    extended_core_property_type;
diff --git a/app_render_setting_property/property_contexts b/app_render_setting_property/property_contexts
@@ -0,0 +1,2 @@
+persist.vendor.intel.dGPU u:object_r:vendor_intel_render_selection_prop:s0
+persist.vendor.intel.lowPir u:object_r:vendor_intel_render_selection_prop:s0
diff --git a/app_render_setting_property/system_app.te b/app_render_setting_property/system_app.te
@@ -0,0 +1,4 @@
+#
+# system_app
+#
+set_prop(system_app, vendor_intel_render_selection_prop)
diff --git a/app_render_setting_property/system_server.te b/app_render_setting_property/system_server.te
@@ -0,0 +1 @@
+get_prop(system_server, vendor_intel_render_selection_prop)
diff --git a/app_render_setting_property/untrusted_app_all.te b/app_render_setting_property/untrusted_app_all.te
@@ -0,0 +1 @@
+get_prop(untrusted_app_all, vendor_intel_render_selection_prop)
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		get_prop(platform_app, vendor_intel_render_selection_prop)
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		get_prop(priv_app, vendor_intel_render_selection_prop)
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		vendor_public_prop(vendor_intel_render_selection_prop)
		typeattribute vendor_intel_render_selection_prop extended_core_property_type;
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		persist.vendor.intel.dGPU u:object_r:vendor_intel_render_selection_prop:s0
		persist.vendor.intel.lowPir u:object_r:vendor_intel_render_selection_prop:s0
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		get_prop(system_server, vendor_intel_render_selection_prop)
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		get_prop(untrusted_app_all, vendor_intel_render_selection_prop)