Merge "remove obsolete entries and put crucial domains to permissive" into sc-dev am: 48113ddced

Original change: https://googleplex-android-review.googlesource.com/c/device/google/gs101-sepolicy/+/13805052

MUST ONLY BE SUBMITTED BY AUTOMERGER

Change-Id: If914068d4fb3369486f1dbef8af614245b9dfa0b
This commit is contained in:
Adam Shih 2021-03-10 01:46:48 +00:00 committed by Automerger Merge Worker
commit 84bb9a87b8
4 changed files with 9 additions and 5 deletions

View file

@ -10,6 +10,3 @@ dontaudit hal_power_default sysfs:file { read };
dontaudit hal_power_default sysfs:file { getattr };
dontaudit hal_power_default sysfs:file { read };
dontaudit hal_power_default sysfs:file { getattr };
# b/181713002
dontaudit hal_power_default hal_graphics_composer_default:binder { transfer };
dontaudit hal_power_default hal_graphics_composer_default:binder { transfer };

View file

@ -2,5 +2,6 @@
dontaudit mediacodec sysfs:file { getattr };
dontaudit mediacodec sysfs:file { open };
dontaudit mediacodec sysfs:file { read };
# b/176777184
dontaudit mediacodec default_android_vndservice:service_manager add ;
userdebug_or_eng(`
permissive mediacodec;
')

View file

@ -9,3 +9,6 @@ dontaudit tee persist_file:dir { search };
dontaudit tee mnt_vendor_file:dir { search };
dontaudit tee tee_data_file:lnk_file { read };
dontaudit tee persist_file:file { read write };
userdebug_or_eng(`
permissive tee;
')

View file

@ -4,6 +4,9 @@ dontaudit vendor_init tmpfs:dir { add_name write };
dontaudit vendor_init debugfs_trace_marker:file { getattr };
# b/177186257
dontaudit vendor_init system_data_file:dir { open ioctl read };
userdebug_or_eng(`
permissive vendor_init;
')
# b/174443175
dontaudit vendor_init vendor_power_prop:property_service { set };
# b/177386448