sm6250-common: Make fastrpc_shell_3 publicly available

* Used by GCAM for DSP-accelerated HDR processing
 * Arguably we should label /vendor/dsp/cdsp/fastrpc_shell_3 to
   same_process_hal_file like Pixels, but the partition is prebuilt thus
   we're unable to relabel it.
 * Copy the file to writable tmpfs, setup attributes and bind mount back
   to workaround the limitation.

[ghostrider-reborn]:
Allow adsp/cdsprpcd and neuralnetworks HAL to access fastrpc_shell_3

[kras edit:
 1. rename some contexts as per qva/kona
 2. extend to allow camera HAL and VPP service to access it as well]

[dereference23: Remove VPP policy because atoll doesn't use it]

Co-authored-by: Adithya R <gh0strider.2k18.reborn@gmail.com>
Change-Id: Ide90e5c7307d413db5ece736e859559f06679545
This commit is contained in:
dianlujitao 2020-05-07 00:10:55 +08:00 committed by Alexander Winkowski
parent c653ce51be
commit 92b6e36b71
No known key found for this signature in database
GPG Key ID: 72762A66704CDE44
9 changed files with 22 additions and 0 deletions

View File

@ -73,6 +73,11 @@ on post-fs
chmod 0660 /sys/class/leds/red/brightness chmod 0660 /sys/class/leds/red/brightness
chown system system /sys/class/leds/red/brightness chown system system /sys/class/leds/red/brightness
mkdir /mnt/vendor/dsp 0770 root root
copy /vendor/dsp/cdsp/fastrpc_shell_3 /mnt/vendor/dsp/fastrpc_shell_3
chmod 0644 /mnt/vendor/dsp/fastrpc_shell_3
mount none /mnt/vendor/dsp/fastrpc_shell_3 /vendor/dsp/cdsp/fastrpc_shell_3 bind
on early-boot on early-boot
# set RLIMIT_MEMLOCK to 64MB # set RLIMIT_MEMLOCK to 64MB
setrlimit 8 67108864 67108864 setrlimit 8 67108864 67108864

View File

@ -1 +1,2 @@
r_dir_file(vendor_adsprpcd, public_adsprpcd_file)
r_dir_file(vendor_adsprpcd, vendor_sysfs_graphics) r_dir_file(vendor_adsprpcd, vendor_sysfs_graphics)

View File

@ -1,2 +1,5 @@
allow { appdomain -isolated_app } adsprpcd_file:dir r_dir_perms;
allow { appdomain -isolated_app } public_adsprpcd_file:file r_file_perms;
get_prop({ appdomain -isolated_app }, vendor_fp_prop) get_prop({ appdomain -isolated_app }, vendor_fp_prop)
get_prop({ appdomain -isolated_app }, vendor_tee_listener_prop) get_prop({ appdomain -isolated_app }, vendor_tee_listener_prop)

1
sepolicy/vendor/cdsprpcd.te vendored Normal file
View File

@ -0,0 +1 @@
r_dir_file(vendor_cdsprpcd, public_adsprpcd_file)

View File

@ -6,6 +6,8 @@ type fingerprint_data_file, data_file_type, file_type, vendor_persist_type;
type persist_subsys_file, vendor_persist_type, file_type; type persist_subsys_file, vendor_persist_type, file_type;
type public_adsprpcd_file, file_type;
type sysfs_msm_boot, fs_type, sysfs_type; type sysfs_msm_boot, fs_type, sysfs_type;
type sysfs_msm_subsys, sysfs_type, fs_type; type sysfs_msm_subsys, sysfs_type, fs_type;

View File

@ -17,6 +17,11 @@
/data/vendor/goodix(/.*)? u:object_r:fingerprint_data_file:s0 /data/vendor/goodix(/.*)? u:object_r:fingerprint_data_file:s0
/data/vendor/fpc(/.*)? u:object_r:fingerprint_data_file:s0 /data/vendor/fpc(/.*)? u:object_r:fingerprint_data_file:s0
# Hexagon DSP-side executable needed for Halide operation
# This is labeled as public_adsprpcd_file as it needs to be read by apps
# (e.g. Google Camera App)
/mnt/vendor/dsp/fastrpc_shell_3 u:object_r:public_adsprpcd_file:s0
# IR # IR
/dev/spidev0.1 u:object_r:lirc_device:s0 /dev/spidev0.1 u:object_r:lirc_device:s0

View File

@ -15,3 +15,5 @@ set_prop(hal_camera_default, vendor_camera_prop)
allow hal_camera_default socket_device:sock_file write; allow hal_camera_default socket_device:sock_file write;
allow hal_camera_default proc_stat:file { open }; allow hal_camera_default proc_stat:file { open };
allow hal_camera_default public_adsprpcd_file:file r_file_perms;

View File

@ -0,0 +1 @@
r_dir_file(vendor_hal_neuralnetworks_default, public_adsprpcd_file)

View File

@ -2,3 +2,5 @@
allow init debugfs_tracing_debug:dir mounton; allow init debugfs_tracing_debug:dir mounton;
allow init same_process_hal_file:file execute; allow init same_process_hal_file:file execute;
allow init adsprpcd_file:file mounton;