From bb65706952250de52b80f05cfa38b5777b6ebb04 Mon Sep 17 00:00:00 2001 From: Saya Andy Date: Wed, 9 Sep 2026 02:04:43 +0700 Subject: fix: sensor auto-rotate - fastrpc node name, ssc-accel tag, SELinux QRTR perms --- .../usr/local/share/selinux/iio-qipcrtr.te | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 root/tmp/SayaAndy/surface-pro-12-inch-linux-fedora/usr/local/share/selinux/iio-qipcrtr.te (limited to 'root/tmp/SayaAndy/surface-pro-12-inch-linux-fedora/usr') diff --git a/root/tmp/SayaAndy/surface-pro-12-inch-linux-fedora/usr/local/share/selinux/iio-qipcrtr.te b/root/tmp/SayaAndy/surface-pro-12-inch-linux-fedora/usr/local/share/selinux/iio-qipcrtr.te new file mode 100644 index 0000000..d92dc21 --- /dev/null +++ b/root/tmp/SayaAndy/surface-pro-12-inch-linux-fedora/usr/local/share/selinux/iio-qipcrtr.te @@ -0,0 +1,19 @@ +module iio-qipcrtr 1.0; + +// Fedora's policy grants iiosensorproxy_t no qipcrtr_socket permissions at +// all: the class exists but nothing allows it, because upstream +// iio-sensor-proxy talks to sensors over IIO and never needed QRTR. The SSC +// backend libssc brings in here reaches the Qualcomm Sensor Core over the +// QRTR bus (libssc probes AF_QIPCRTR first; the fastrpc/hexagonrpcd path is +// what actually serves this board, but the probe alone gets the daemon +// killed by "QRTR bus unavailable" + "No sensors" without these perms). +// +// Hand-written rather than audit2allow'd per-incident: create/bind/... is +// the full client lifecycle, so a policy reload or libssc update cannot +// surface a new denied perm one at a time. +require { + type iiosensorproxy_t; + class qipcrtr_socket { create bind connect read write getattr setattr getopt setopt shutdown }; +} + +allow iiosensorproxy_t self:qipcrtr_socket { create bind connect read write getattr setattr getopt setopt shutdown }; -- cgit v1.3.1+17