From 904897c7f1e56cf45fd31d357b3e09f88309e160 Mon Sep 17 00:00:00 2001 From: Siddharth Kapoor Date: Wed, 16 Jan 2019 14:03:38 +0800 Subject: [PATCH] selinux: Add vendor display properties to public_vendor_default_prop Clean up avc denials from vendor display properties - vendor.gralloc.disable_ubwc - vendor.debug.egl.profiler - vendor.gralloc.enable_ahardware_buffer Bug: 79617173 Test: check device logs with new sepolicy. cannot find avc denials. Change-Id: Ie1db22ebefa0c2533459c584cac4ad5534556749 --- sepolicy/vendor/property_contexts | 3 +++ 1 file changed, 3 insertions(+) diff --git a/sepolicy/vendor/property_contexts b/sepolicy/vendor/property_contexts index 52531a9f..1e3533a9 100644 --- a/sepolicy/vendor/property_contexts +++ b/sepolicy/vendor/property_contexts @@ -52,6 +52,9 @@ vendor.debug.egl.changepixelformat u:object_r:public_vendor_default_prop:s0 vendor.debug.prerotation.disable u:object_r:public_vendor_default_prop:s0 vendor.debug.rs. u:object_r:public_vendor_default_prop:s0 vendor.debug.egl.swapinterval u:object_r:public_vendor_default_prop:s0 +vendor.gralloc.disable_ubwc u:object_r:public_vendor_default_prop:s0 +vendor.debug.egl.profiler u:object_r:public_vendor_default_prop:s0 +vendor.gralloc.enable_ahardware_buffer u:object_r:public_vendor_default_prop:s0 # public_vendor_system_prop # They are public_vendor_system_props for vendor-specific extension.