Files
device_google_wahoo/sepolicy/vendor/surfaceflinger.te
linjoey d2029e9577 display: dontaudit various domains for read/search sysfs_msm_subsys
Graphics drivers gfx promo #0454 adds dependency on gpu_model sysfs
node. This needs various domains to have sepolicy to read and search the
sysfs node. Dontaudit these domains for read/search into sysfs_msm_subsys

Bug: 150924173
Test: device logs does not throw selinux denials, pass pre-submit checks
Change-Id: I5b2dd718d6af92ed557da17181d6595f72f0cc29
2020-03-17 16:16:06 +08:00

10 lines
439 B
Plaintext

dontaudit surfaceflinger firmware_file:dir search;
dontaudit surfaceflinger vendor_file:file read;
dontaudit surfaceflinger kernel:system module_request;
allow surfaceflinger debugfs_ion:dir search;
typeattribute surfaceflinger system_writes_vendor_properties_violators;
set_prop(surfaceflinger, public_vendor_system_prop)
dontaudit surfaceflinger sysfs_msm_subsys:dir search;
dontaudit surfaceflinger sysfs_msm_subsys:file r_file_perms;