summaryrefslogtreecommitdiff
path: root/sepolicy/te_macros
blob: a50bec19da08481eaf3f31b29a7886863c25b4ef (plain)
1
2
3
4
5
6
7
8
9
10
#####################################
# gpu_access(client_domain)
# Allow client_domain to communicate with the GPU
define(`gpu_access', `
allow $1 dri_device:dir { open read search };
allow $1 sysfs_gpu:dir search;
allow $1 gpu_device:chr_file { getattr ioctl map open read write };
allow $1 graphics_device:chr_file { getattr };
allow $1 sysfs_gpu:file { getattr open read };
')