Files
device_google_walleye/sepolicy/surfaceflinger.te
Max Bires 6f4943b5be Added surfaceflinger.te and domain.te to expand policy coverage.
Added access to diag_device for userdebug/eng builds in
domain.te under the expectation that a good number of other types might
need it as access. Also added access to search persist_file directories
in surfaceflinger.te to address selinux denials.

Bug: 34784662
Test: surfaceflinger search denials absent from boot logs
Change-Id: I5546f6204bbe4ce2cbd26b9a9269aa9bb33d9508
2017-02-03 15:26:39 -08:00

3 lines
56 B
Plaintext

# persist
allow surfaceflinger persist_file:dir search;