label GPU as same_process_hal

Bug: 261933250
Bug: 261933249
Bug: 261933226
Bug: 261933097
Bug: 261933428
Bug: 261933227
Bug: 260768740
Bug: 260922185
Test: boot to home under enforcing mode
Change-Id: Ied95ce0c1f851785e0848f7af788969f27e45101
This commit is contained in:
Adam Shih 2023-01-04 11:59:09 +08:00
parent 97748d82a9
commit 92f2edf487
10 changed files with 1 additions and 53 deletions

View file

@ -1,6 +0,0 @@
# b/261933250
dontaudit mediaprovider_app vendor_file:file { getattr };
dontaudit mediaprovider_app vendor_file:file { map };
dontaudit mediaprovider_app vendor_file:file { open };
dontaudit mediaprovider_app vendor_file:file { read };
permissive mediaprovider_app;

View file

@ -2,8 +2,3 @@
dontaudit bootanim system_data_file:dir { search };
# b/261105374
dontaudit bootanim default_android_service:service_manager { find };
dontaudit bootanim vendor_file:file { execute };
dontaudit bootanim vendor_file:file { getattr };
dontaudit bootanim vendor_file:file { map };
dontaudit bootanim vendor_file:file { open };
dontaudit bootanim vendor_file:file { read };

View file

@ -1,8 +1,3 @@
# b/261933249
dontaudit google_camera_app vendor_file:file { getattr };
dontaudit google_camera_app vendor_file:file { map };
dontaudit google_camera_app vendor_file:file { open };
dontaudit google_camera_app vendor_file:file { read };
# b/262455755
dontaudit google_camera_app activity_service:service_manager { find };
dontaudit google_camera_app cameraserver_service:service_manager { find };

View file

@ -1,5 +0,0 @@
# b/261933226
dontaudit isolated_app vendor_file:file { getattr };
dontaudit isolated_app vendor_file:file { map };
dontaudit isolated_app vendor_file:file { open };
dontaudit isolated_app vendor_file:file { read };

View file

@ -13,11 +13,6 @@ dontaudit priv_app euiccpixel_app:binder { transfer };
# b/260922442
dontaudit priv_app default_android_service:service_manager { find };
dontaudit priv_app euiccpixel_app:binder { transfer };
# b/261933097
dontaudit priv_app vendor_file:file { getattr };
dontaudit priv_app vendor_file:file { map };
dontaudit priv_app vendor_file:file { open };
dontaudit priv_app vendor_file:file { read };
# b/262455954
dontaudit priv_app euiccpixel_app:binder { call };
# b/263185432

View file

@ -1,7 +1,2 @@
# b/261105092
dontaudit surfaceflinger default_android_service:service_manager { find };
dontaudit surfaceflinger vendor_file:file { execute };
dontaudit surfaceflinger vendor_file:file { getattr };
dontaudit surfaceflinger vendor_file:file { map };
dontaudit surfaceflinger vendor_file:file { open };
dontaudit surfaceflinger vendor_file:file { read };

View file

@ -1,5 +0,0 @@
# b/261933428
dontaudit untrusted_app vendor_file:file { getattr };
dontaudit untrusted_app vendor_file:file { map };
dontaudit untrusted_app vendor_file:file { open };
dontaudit untrusted_app vendor_file:file { read };

View file

@ -1,5 +0,0 @@
# b/261933227
dontaudit untrusted_app_30 vendor_file:file { getattr };
dontaudit untrusted_app_30 vendor_file:file { map };
dontaudit untrusted_app_30 vendor_file:file { open };
dontaudit untrusted_app_30 vendor_file:file { read };

View file

@ -1,16 +1,4 @@
# b/260522203
dontaudit zygote euiccpixel_app:process { dyntransition };
# b/260768740
dontaudit zygote vendor_file:file { execute };
dontaudit zygote vendor_file:file { getattr };
dontaudit zygote vendor_file:file { map };
dontaudit zygote vendor_file:file { open };
dontaudit zygote vendor_file:file { read };
# b/260922185
dontaudit zygote vendor_file:file { execute };
dontaudit zygote vendor_file:file { getattr };
dontaudit zygote vendor_file:file { map };
dontaudit zygote vendor_file:file { open };
dontaudit zygote vendor_file:file { read };
# b/261782930
dontaudit zygote con_monitor_app:process { dyntransition };

View file

@ -26,6 +26,7 @@
# Vendor Firmwares
/vendor/firmware(/.*)? u:object_r:vendor_fw_file:s0
/vendor/lib64/arm\.mali\.platform-V1-ndk\.so u:object_r:same_process_hal_file:s0
# persist
/mnt/vendor/persist/camera(/.*)? u:object_r:persist_camera_file:s0