1# surfaceflinger - display compositor service
2
3typeattribute surfaceflinger coredomain;
4
5type surfaceflinger_exec, exec_type, file_type;
6init_daemon_domain(surfaceflinger)
7
8typeattribute surfaceflinger mlstrustedsubject;
9typeattribute surfaceflinger display_service_server;
10
11read_runtime_log_tags(surfaceflinger)
12
13# Perform HwBinder IPC.
14hal_client_domain(surfaceflinger, hal_graphics_allocator)
15hal_client_domain(surfaceflinger, hal_graphics_composer)
16hal_client_domain(surfaceflinger, hal_configstore)
17allow surfaceflinger hal_configstore_ISurfaceFlingerConfigs:hwservice_manager find;
18allow surfaceflinger hidl_token_hwservice:hwservice_manager find;
19
20# Perform Binder IPC.
21binder_use(surfaceflinger)
22binder_call(surfaceflinger, binderservicedomain)
23binder_call(surfaceflinger, appdomain)
24binder_call(surfaceflinger, bootanim)
25binder_service(surfaceflinger)
26
27# Binder IPC to bu, presently runs in adbd domain.
28binder_call(surfaceflinger, adbd)
29
30# Read /proc/pid files for Binder clients.
31r_dir_file(surfaceflinger, binderservicedomain)
32r_dir_file(surfaceflinger, appdomain)
33
34# Access the GPU.
35allow surfaceflinger gpu_device:chr_file rw_file_perms;
36
37# Access /dev/graphics/fb0.
38allow surfaceflinger graphics_device:dir search;
39allow surfaceflinger graphics_device:chr_file rw_file_perms;
40
41# Access /dev/video1.
42allow surfaceflinger video_device:dir r_dir_perms;
43allow surfaceflinger video_device:chr_file rw_file_perms;
44
45# Create and use netlink kobject uevent sockets.
46allow surfaceflinger self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;
47
48# Set properties.
49set_prop(surfaceflinger, system_prop)
50set_prop(surfaceflinger, ctl_bootanim_prop)
51
52# Use open files supplied by an app.
53allow surfaceflinger appdomain:fd use;
54allow surfaceflinger app_data_file:file { read write };
55
56# Use socket supplied by adbd, for cmd gpu vkjson etc.
57allow surfaceflinger adbd:unix_stream_socket { read write getattr };
58
59# Allow a dumpstate triggered screenshot
60binder_call(surfaceflinger, dumpstate)
61binder_call(surfaceflinger, shell)
62r_dir_file(surfaceflinger, dumpstate)
63
64# Needed on some devices for playing DRM protected content,
65# but seems expected and appropriate for all devices.
66allow surfaceflinger tee_device:chr_file rw_file_perms;
67
68
69# media.player service
70add_service(surfaceflinger, gpu_service)
71
72# do not use add_service() as hal_graphics_composer_default may be the
73# provider as well
74#add_service(surfaceflinger, surfaceflinger_service)
75allow surfaceflinger surfaceflinger_service:service_manager { add find };
76
77allow surfaceflinger mediaserver_service:service_manager find;
78allow surfaceflinger permission_service:service_manager find;
79allow surfaceflinger power_service:service_manager find;
80allow surfaceflinger vr_manager_service:service_manager find;
81allow surfaceflinger window_service:service_manager find;
82
83
84# allow self to set SCHED_FIFO
85allow surfaceflinger self:capability sys_nice;
86allow surfaceflinger proc_meminfo:file r_file_perms;
87r_dir_file(surfaceflinger, cgroup)
88r_dir_file(surfaceflinger, sysfs_type)
89r_dir_file(surfaceflinger, system_file)
90allow surfaceflinger tmpfs:dir r_dir_perms;
91allow surfaceflinger system_server:fd use;
92allow surfaceflinger ion_device:chr_file r_file_perms;
93
94# pdx IPC
95pdx_server(surfaceflinger, display_client)
96pdx_server(surfaceflinger, display_manager)
97pdx_server(surfaceflinger, display_screenshot)
98pdx_server(surfaceflinger, display_vsync)
99
100pdx_client(surfaceflinger, bufferhub_client)
101pdx_client(surfaceflinger, performance_client)
102
103###
104### Neverallow rules
105###
106### surfaceflinger should NEVER do any of this
107
108# Do not allow accessing SDcard files as unsafe ejection could
109# cause the kernel to kill the process.
110neverallow surfaceflinger sdcard_type:file rw_file_perms;
111