diff --git a/tracking_denials/hal_graphics_composer_default.te b/tracking_denials/hal_graphics_composer_default.te deleted file mode 100644 index a4c58ea3..00000000 --- a/tracking_denials/hal_graphics_composer_default.te +++ /dev/null @@ -1,11 +0,0 @@ -# b/263184738 -dontaudit hal_graphics_composer_default vendor_hwc_log_file:dir { search }; -dontaudit hal_graphics_composer_default vendor_hwc_log_file:file { append }; -dontaudit hal_graphics_composer_default vendor_hwc_log_file:file { getattr }; -dontaudit hal_graphics_composer_default vendor_hwc_log_file:file { open }; -dontaudit hal_graphics_composer_default vendor_hwc_log_file:file { write }; -dontaudit hal_graphics_composer_default vendor_log_file:dir { search }; -# b/264489746 -userdebug_or_eng(` - permissive hal_graphics_composer_default; -') \ No newline at end of file diff --git a/vendor/hal_graphics_composer_default.te b/vendor/hal_graphics_composer_default.te index 94f4a3dd..46c6a45c 100644 --- a/vendor/hal_graphics_composer_default.te +++ b/vendor/hal_graphics_composer_default.te @@ -38,3 +38,8 @@ add_service(hal_graphics_composer_default, vendor_surfaceflinger_vndservice) # allow HWC to output to dumpstate via pipe fd allow hal_graphics_composer_default hal_dumpstate_default:fifo_file { append write }; allow hal_graphics_composer_default hal_dumpstate_default:fd use; + +# allow HWC to read/write/search hwc_log_file +allow hal_graphics_composer_default vendor_hwc_log_file:dir rw_dir_perms; +allow hal_graphics_composer_default vendor_hwc_log_file:file create_file_perms; +allow hal_graphics_composer_default vendor_log_file:dir search;