From f1b945544cd1c98db03875cce80bb96895a980af Mon Sep 17 00:00:00 2001 From: Konsta Date: Wed, 19 Mar 2025 19:29:01 +0200 Subject: [PATCH] sepolicy: add more drm devices * Pi 5 has independent cards for DSI-0, DSI-1, DPI, and VEC. In theory we could have two DSI displays so add two more entries. avc: denied { ioctl } for path="/dev/dri/card2" dev="tmpfs" ino=749 ioctlcmd=0x64bc scontext=u:r:hal_graphics_composer_default:s0 tcontext=u:object_r:device:s0 tclass=chr_file permissive=1 --- sepolicy/file_contexts | 2 ++ 1 file changed, 2 insertions(+) diff --git a/sepolicy/file_contexts b/sepolicy/file_contexts index 17c6693..0649da8 100644 --- a/sepolicy/file_contexts +++ b/sepolicy/file_contexts @@ -20,6 +20,8 @@ /dev/dri u:object_r:gpu_device:s0 /dev/dri/card0 u:object_r:gpu_device:s0 /dev/dri/card1 u:object_r:gpu_device:s0 +/dev/dri/card2 u:object_r:gpu_device:s0 +/dev/dri/card3 u:object_r:gpu_device:s0 /dev/dri/renderD128 u:object_r:gpu_device:s0 /vendor/bin/hw/android\.hardware\.graphics\.allocator@4\.0-service\.minigbm_gbm_mesa u:object_r:hal_graphics_allocator_default_exec:s0 /vendor/lib(64)?/hw/android\.hardware\.graphics.mapper@4\.0-impl\.minigbm_gbm_mesa\.so u:object_r:same_process_hal_file:s0