tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Allow system_server read access to SurfaceFlinger

Browse source 
This change gives system_server read permissions to SurfaceFlinger in
order to pin it with PinnerService.

Bug: 176197656
Test: adb shell dumpsys pinner
      /system/bin/surfaceflinger was successfully pinned.
Change-Id: Ic845eebe298ec2d602b86003c07889f37fc44159
This commit is contained in:
Kevin Jeon 2021-01-19 20:09:50 +00:00
parent 706d5feee2
commit 132f7696d0
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
private/system_server.te
View file

@ -1181,6 +1181,9 @@ allow system_server staged_install_file:file create_file_perms;
allow system_server watchdog_metadata_file:dir rw_dir_perms;
allow system_server watchdog_metadata_file:file create_file_perms;
# Allow system server r access to /system/bin/surfaceflinger for PinnerService.
allow system_server surfaceflinger_exec:file r_file_perms;
# Allow init to set sysprop used to compute stats about userspace reboot.
set_prop(system_server, userspace_reboot_log_prop)