tequilaOS/platform_device_qcom_sepolicy_vndr-legacy-um
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Sepolicy : Add dont audit for vendor_gles_data_file label

Browse source 
System process cannot access vendor partition files.

Change-Id: I7fd5805ac98319660c1e5f9fca3ae2137a49d0a0
This commit is contained in:
kranthi 2019-09-23 16:41:37 +05:30
parent 49a8c0000d
commit 9476d1b95c
2 changed files with 14 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
generic/vendor/test/domain.te vendored
View file

@ -26,23 +26,13 @@
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
dontaudit {
system_server
surfaceflinger
bootanim
system_app
platform_app
zygote
location_app
location_app_test
priv_app
radio
shell
zygote
mediaswcodec
coredomain
appdomain
} vendor_gles_data_file:dir search;
dontaudit {
system_app
coredomain
appdomain
} vendor_gles_data_file:file *;
#allow all gpu clients to access configuration settings
userdebug_or_eng(`

10
legacy/vendor/test/domain.te vendored
View file

@ -25,6 +25,16 @@
# OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN
# IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
dontaudit {
coredomain
appdomain
} vendor_gles_data_file:dir search;
dontaudit {
coredomain
appdomain
} vendor_gles_data_file:file *;
#allow all gpu clients to access configuration settings
userdebug_or_eng(`
allow {domain - coredomain - hal_configstore_default} sysfs_kgsl:dir search;