Evolution-X-Tensor/device_google_gs101
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

gs101-sepolicy: Use untrusted_app_all for vendor_sched denials

Browse source 
Use untrusted_app_all to cover all Use untrusted_app versions.

Bug: 196109806
Test: no untrusted_app denials for vendor_sched
Change-Id: Ic6426b26b8a05f8a0bc7e2a4a4a293b2988812d3
This commit is contained in:
Rick Yiu 2021-08-12 13:27:20 +08:00 • committed by Chris Fries
parent df73384b2e
commit 2ef3daba50
3 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

1
whitechapel/vendor/google/untrusted_app.te vendored
View file

@ -1 +0,0 @@
dontaudit untrusted_app sysfs_vendor_sched:dir search;

1
whitechapel/vendor/google/untrusted_app_29.te vendored
View file

@ -1 +0,0 @@
dontaudit untrusted_app_29 sysfs_vendor_sched:dir search;

2
whitechapel/vendor/google/untrusted_app_all.te vendored
View file

@ -1,3 +1,5 @@
# Allows Exoplayer(and other applications) access to the vstream-secure DMA-BUF heap # Allows Exoplayer(and other applications) access to the vstream-secure DMA-BUF heap
# for secure video playback # for secure video playback
allow untrusted_app_all dmabuf_system_secure_heap_device:chr_file r_file_perms; allow untrusted_app_all dmabuf_system_secure_heap_device:chr_file r_file_perms;
dontaudit untrusted_app_all sysfs_vendor_sched:dir search;