sepolicy: common-um: Allow keyprovd to read QSEECOM heap device

log1cs · luk1337 · commit f5d2e0ecad67 · 2026-01-15T16:09:37.000+01:00
11-19 10:33:59.531  1755  1755 I keyprovd: type=1400 audit(0.0:36): avc:  denied  { read } for  name="qcom,qseecom" dev="tmpfs" ino=1632 scontext=u:r:keyprovd:s0 tcontext=u:object_r:vendor_dmabuf_qseecom_heap_device:s0 tclass=chr_file permissive=1
11-19 10:33:59.531  1755  1755 I keyprovd: type=1400 audit(0.0:37): avc:  denied  { open } for  path="/dev/dma_heap/qcom,qseecom" dev="tmpfs" ino=1632 scontext=u:r:keyprovd:s0 tcontext=u:object_r:vendor_dmabuf_qseecom_heap_device:s0 tclass=chr_file permissive=1
11-19 10:33:59.531  1755  1755 I keyprovd: type=1400 audit(0.0:38): avc:  denied  { ioctl } for  path="/dev/dma_heap/qcom,qseecom" dev="tmpfs" ino=1632 ioctlcmd=0x4800 scontext=u:r:keyprovd:s0 tcontext=u:object_r:vendor_dmabuf_qseecom_heap_device:s0 tclass=chr_file permissive=1

Change-Id: Iaa43d10ad58e0d63743fe54deab605a43e70afac
diff --git a/sepolicy/qti/vendor/common-um/keyprovd.te b/sepolicy/qti/vendor/common-um/keyprovd.te
@@ -0,0 +1 @@
+allow keyprovd vendor_dmabuf_qseecom_heap_device:chr_file r_file_perms;

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+allow keyprovd vendor_dmabuf_qseecom_heap_device:chr_file r_file_perms;`