Skip to content

Commit

Permalink
Fix ipu6ep firmware loading issue
Browse files Browse the repository at this point in the history
Issue Detailed: Android14 secpolicy forbids to load the firmware files
from /vendor/firmware/intel/ipu/

Issue Fixed: Modify kernel.te to allow to load firmwares from that path.

Issue Tested: Successfully load ipu6ep.bin which locates in the above
path.

Tracked-On: OAM-129975
Signed-off-by: Zhenlong Z Ji <zhenlong.z.ji@intel.com>
Signed-off-by: Neo Fang <neo.fang@intel.com>
  • Loading branch information
neofang7 authored and sysopenci committed Feb 9, 2025
1 parent 49b90af commit 09115fe
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions kernel/kernel.te
Original file line number Diff line number Diff line change
Expand Up @@ -12,3 +12,7 @@ allow kernel kernel:capability sys_admin;
# For loading /lib/modules/inet_diag.ko
allow kernel rootfs:system module_load;
allow kernel system_file:system module_load;

# For loading /vendor/firmwares
allow kernel vendor_file:dir r_dir_perms;
allow kernel vendor_file:file r_file_perms;

0 comments on commit 09115fe

Please sign in to comment.