lineage-rockchip/android_external_minigbm
1
0
Fork 0
Code Activity Actions

android: sepolicy: Add minigbm SELinux policies

Browse source 
Add default set of minigbm SELinux policies, to suppress
audit of minigbm reading vendor.minigbm.debug property,
for the devices which do not use this property.

Change-Id: I277a553e869b7a53a85ca70064c2eef110afeee2
Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
This commit is contained in:
Amit Pundir 2023-07-20 11:03:34 +05:30
parent b198c6e233
commit d046ea007f
3 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
cros_gralloc/sepolicy/cameraserver.te Normal file
View file

@ -0,0 +1,3 @@
# Suppress warnings for minigbm trying to read vendor.minigbm.debug
# property for the devices which do not use this property.
dontaudit cameraserver vendor_default_prop:file read;

3
cros_gralloc/sepolicy/mediaswcodec.te Normal file
View file

@ -0,0 +1,3 @@
# Suppress warnings for minigbm trying to read vendor.minigbm.debug
# property for the devices which do not use this property.
dontaudit mediaswcodec vendor_default_prop:file read;

3
cros_gralloc/sepolicy/system_server.te Normal file
View file

@ -0,0 +1,3 @@
# Suppress warnings for minigbm trying to read vendor.minigbm.debug
# property for the devices which do not use this property.
dontaudit system_server vendor_default_prop:file read;