StrixOS/build
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "Temporarily whitelisting system domains writing vendor props" into pi-dev

Browse Source 
am: 92267a5d02

Change-Id: I641fbbb0e3efecafbbfdb5d523218a6967961eca
This commit is contained in:
Jiyong Park
2018-05-21 22:10:49 -07:00
committed by android-build-merger
parent 15d2a4bec7 92267a5d02
commit 77d665b558
3 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
target/board/generic/sepolicy/bootanim.te
View File

@@ -5,4 +5,5 @@ dontaudit bootanim system_data_file:dir read;
allow bootanim graphics_device:chr_file { read ioctl open };
typeattribute bootanim system_writes_vendor_properties_violators;
set_prop(bootanim, qemu_prop)

1
target/board/generic/sepolicy/surfaceflinger.te
View File

@@ -1,4 +1,5 @@
allow surfaceflinger self:process execmem;
allow surfaceflinger ashmem_device:chr_file execute;
typeattribute surfaceflinger system_writes_vendor_properties_violators;
set_prop(surfaceflinger, qemu_prop)

1
target/board/generic/sepolicy/zygote.te
View File

@@ -1,3 +1,4 @@
typeattribute zygote system_writes_vendor_properties_violators;
set_prop(zygote, qemu_prop)
# TODO (b/63631799) fix this access
# Suppress denials to storage. Webview zygote should not be accessing.