Evolution-X-Tensor/device_google_gs-common
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Set up access control rule for aocxd

Browse source 
Test: make -j64
Bug: 385663354
Flag: EXEMPT bugfix
Change-Id: I1b6584a0643085e9d69c85b27a0ba3667aacf1cf
This commit is contained in:
Bowen Lai 2024-12-25 07:18:45 +00:00
parent 327eb5b7eb
commit f3564e9b91
2 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
aoc/sepolicy/allowlist/aocxd_neverallow.te Normal file
View file

@ -0,0 +1,2 @@
# set up rule to control the access to aocxd
neverallow { domain -hwservicemanager -servicemanager -vndservicemanager -system_suspend_server -dumpstate -hal_audio_default -dcservice_app } aocxd:binder { call transfer };