sm6375-common: sepolicy: Neverallow app open access to /dev/ashmem

- Fixes scroll lag in apps such as twitter etc.

Apps are no longer allowed open access to /dev/ashmem, unless they
target API level < Q.

Bug: 113362644
Test: device boots, Chrome, instant apps work
Signed-off-by: Ahmad Rulim <personal@rulim34.dev>
This commit is contained in:
Tri Vo
2022-09-08 23:55:38 +07:00
committed by boedhack99
parent 465da3b8b8
commit ffa3258380

1
sepolicy/vendor/donaudit.te vendored Normal file
View File

@@ -0,0 +1 @@
dontaudit untrusted_app ashmem_device:chr_file open;