From ffa3258380339df603146af1c0c21dd63736dded Mon Sep 17 00:00:00 2001 From: Tri Vo Date: Thu, 8 Sep 2022 23:55:38 +0700 Subject: [PATCH] sm6375-common: sepolicy: Neverallow app open access to /dev/ashmem - Fixes scroll lag in apps such as twitter etc. Apps are no longer allowed open access to /dev/ashmem, unless they target API level < Q. Bug: 113362644 Test: device boots, Chrome, instant apps work Signed-off-by: Ahmad Rulim --- sepolicy/vendor/donaudit.te | 1 + 1 file changed, 1 insertion(+) create mode 100644 sepolicy/vendor/donaudit.te diff --git a/sepolicy/vendor/donaudit.te b/sepolicy/vendor/donaudit.te new file mode 100644 index 0000000..1f087f1 --- /dev/null +++ b/sepolicy/vendor/donaudit.te @@ -0,0 +1 @@ +dontaudit untrusted_app ashmem_device:chr_file open;