Allow system_server access to CMA sysfs nodes
system_server needs access to /sys/kernel/mm/cma/* so that it can
calculate how much memory has been allocated through CMA. Therefore,
grant access to those nodes for system_server.
Bug: 371518137
Bug: 228238851
Change-Id: Idfa61844ccb30197eba60dac289098be0ed8b67b
Signed-off-by: Isaac J. Manjarres <isaacmanjarres@google.com>
diff --git a/private/system_server.te b/private/system_server.te
index 01097f2..b36009f 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -243,6 +243,11 @@
# Read /sys/kernel/dma_heap/*.
allow system_server sysfs_dma_heap:file r_file_perms;
+# Read /sys/kernel/mm/cma/*.
+starting_at_board_api(202504, `
+allow system_server sysfs_cma:file r_file_perms;
+')
+
# Allow reading DMA-BUF sysfs stats from /sys/kernel/dmabuf.
allow system_server sysfs_dmabuf_stats:dir r_dir_perms;
allow system_server sysfs_dmabuf_stats:file r_file_perms;