1# Copyright (c) 2023 Huawei Device Co., Ltd.
2# Licensed under the Apache License, Version 2.0 (the "License");
3# you may not use this file except in compliance with the License.
4# You may obtain a copy of the License at
5#
6#     http://www.apache.org/licenses/LICENSE-2.0
7#
8# Unless required by applicable law or agreed to in writing, software
9# distributed under the License is distributed on an "AS IS" BASIS,
10# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
11# See the License for the specific language governing permissions and
12# limitations under the License.
13
14# avc:  denied  { search } for  pid=490 comm="IPC_7_1799" name="5103" dev="proc" ino=45492 scontext=u:r:samgr:s0 tcontext=u:r:isolated_render:s0 tclass=dir permissive=1
15allow samgr isolated_render:dir { search };
16
17# avc:  denied  { open } for  pid=490 comm="IPC_7_1799" path="/proc/5103/attr/current" dev="proc" ino=44912 scontext=u:r:samgr:s0 tcontext=u:r:isolated_render:s0 tclass=file permissive=1
18# avc:  denied  { read } for  pid=490 comm="IPC_7_1799" name="current" dev="proc" ino=44912 scontext=u:r:samgr:s0 tcontext=u:r:isolated_render:s0 tclass=file permissive=1
19allow samgr isolated_render:file { open read };
20
21# avc:  denied  { getattr } for  pid=490 comm="IPC_7_1799" scontext=u:r:samgr:s0 tcontext=u:r:isolated_render:s0 tclass=process permissive=1
22allow samgr isolated_render:process { getattr };
23
24# avc_audit_slow:262] avc: denied { transfer } for pid=630, comm="/system/bin/samgr"  scontext=u:r:samgr:s0 tcontext=u:r:isolated_render:s0 tclass=binder permissive=1
25
26allow samgr isolated_render:binder { call transfer };
27allow samgr isolated_gpu:dir { search };
28allow samgr isolated_gpu:file { open read };
29allow samgr isolated_gpu:process { getattr };
30allow samgr isolated_gpu:binder { call };
31