From ed151f16ad4b001455f3d72c261e71d98681264a Mon Sep 17 00:00:00 2001 From: Kshitij Gupta Date: Sun, 25 Jun 2023 18:31:17 +0300 Subject: [PATCH] sm6375-common: sepolicy: dontaudit untrusted_app to open ashmem_device - Fixes scroll lag in many apps, such as Twitter: W RenderThread: type=1400 audit(0.0:12371): avc: denied { open } for path=/dev/ashmem dev=tmpfs ino=10848 scontext=u:r:untrusted_app:s0:c123,c256,c512,c768 tcontext=u:object_r:ashmem_device:s0 tclass=chr_file permissive=0 app=com.twitter.android - Apps are no longer allowed open access to /dev/ashmem, unless they target API level < Q. (https://android.googlesource.com/platform/system/sepolicy/+/8b12ff5f218139102d8eec90c91b114078be4402) --- sepolicy/vendor/dontaudit.te | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/sepolicy/vendor/dontaudit.te b/sepolicy/vendor/dontaudit.te index 84547c0..7e55ad9 100644 --- a/sepolicy/vendor/dontaudit.te +++ b/sepolicy/vendor/dontaudit.te @@ -2,3 +2,7 @@ dontaudit { hal_camera_default rild } default_prop:file r_file_perms; + +# Apps are no longer allowed open access to /dev/ashmem, unless they +# target API level < Q. +dontaudit untrusted_app ashmem_device:chr_file open;