xiaomi-unicorn1/android_device_qcom_sepolicy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Sepolicy : Do not audit untrusted_app_27 to fix avc denials

Browse Source 
Add do not audit rule for unrusted_app_27 to fix AVC
denials for gpubusy and max_gpuclk props

Change-Id: Idc541a0effc6812c12c1ff5024dfd0b6d4171180
This commit is contained in:
Aditya Nellutla
2019-07-23 16:26:29 +05:30
parent 370def11f6
commit fcbbf0696e
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
generic/vendor/test/untrusted_app_27.te vendored
View File

@@ -28,6 +28,9 @@
#allow untrusted_app_27 clients to access configuration settings
userdebug_or_eng(`
allow untrusted_app_27 sysfs_kgsl:dir search;
dontaudit {
untrusted_app_27
} sysfs_kgsl:dir read;
r_dir_file(untrusted_app_27, sysfs_kgsl_snapshot);
r_dir_file(untrusted_app_27, vendor_gles_data_file);
allow untrusted_app_27 vendor_gles_data_file:dir rw_dir_perms;