platform_system_sepolicy/surfaceflinger.te
repo sync 77d4731e9d Make all domains unconfined.
This prevents denials from being generated by the base policy.
Over time, these rules will be incrementally tightened to improve
security.

Change-Id: I4be1c987a5d69ac784a56d42fc2c9063c402de11
2013-05-20 11:08:05 -07:00

10 lines
314 B
Text

# surfaceflinger - display compositor service
type surfaceflinger, domain;
permissive surfaceflinger;
type surfaceflinger_exec, exec_type, file_type;
init_daemon_domain(surfaceflinger)
unconfined_domain(surfaceflinger)
# Talk to init over the property socket.
unix_socket_connect(surfaceflinger, property, init)