tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Reduce graphics logspam" am: fcdb7145c1 am: 886eca4f1f

Browse source 
Change-Id: Ida45ddb951df167f9bef66ea303422b896e7db77
This commit is contained in:
Treehugger Robot 2020-04-02 13:47:04 +00:00 committed by Automerger Merge Worker
commit d519e482e4
3 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
private/app.te
View file

@ -19,6 +19,8 @@ dontaudit appdomain storage_stub_file:dir getattr;
# Attempting to do so will be blocked by both selinux and unix
# permissions.
dontaudit appdomain system_data_file:dir write;
# Apps should not be reading vendor-defined properties.
dontaudit appdomain vendor_default_prop:file read;
neverallow appdomain system_server:udp_socket {
accept append bind create ioctl listen lock name_bind

3
private/bootanim.te
View file

@ -5,5 +5,8 @@ init_daemon_domain(bootanim)
# b/68864350
dontaudit bootanim unlabeled:dir search;
# Bootanim should not be reading default vendor-defined properties.
dontaudit bootanim vendor_default_prop:file read;
# Read ro.boot.bootreason b/30654343
get_prop(bootanim, bootloader_boot_reason_prop)

3
private/surfaceflinger.te
View file

@ -126,6 +126,9 @@ userdebug_or_eng(`
unix_socket_send(surfaceflinger, statsdw, statsd)
')
# Surfaceflinger should not be reading default vendor-defined properties.
dontaudit surfaceflinger vendor_default_prop:file read;
###
### Neverallow rules
###