Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 01e1a4ff authored by Jiyong Park's avatar Jiyong Park Committed by android-build-merger
Browse files

Merge "Temporarily whitelisting system domains writing vendor props" 

am: f1a55571

Change-Id: I0af6ea2b74e324eae11b619d956d524919f95806
parents e571fc1f f1a55571

target/board/generic/sepolicy/bootanim.te

+1 −0
Original line number Diff line number Diff line
@@ -5,4 +5,5 @@ dontaudit bootanim system_data_file:dir read; 


allow bootanim graphics_device:chr_file { read ioctl open };



typeattribute bootanim system_writes_vendor_properties_violators;

set_prop(bootanim, qemu_prop)

target/board/generic/sepolicy/surfaceflinger.te

+1 −0
Original line number Diff line number Diff line 
allow surfaceflinger self:process execmem;

allow surfaceflinger ashmem_device:chr_file execute;



typeattribute surfaceflinger system_writes_vendor_properties_violators;

set_prop(surfaceflinger, qemu_prop)

target/board/generic/sepolicy/zygote.te

+1 −0
Original line number Diff line number Diff line 
typeattribute zygote system_writes_vendor_properties_violators;

set_prop(zygote, qemu_prop)

# TODO (b/63631799) fix this access

# Suppress denials to storage. Webview zygote should not be accessing.