Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 77d665b5 authored by Jiyong Park's avatar Jiyong Park Committed by android-build-merger
Browse files

Merge "Temporarily whitelisting system domains writing vendor props" into pi-dev 

am: 92267a5d

Change-Id: I641fbbb0e3efecafbbfdb5d523218a6967961eca
parents 15d2a4be 92267a5d

target/board/generic/sepolicy/bootanim.te

+1 −0
Original line number Diff line number Diff line
@@ -5,4 +5,5 @@ dontaudit bootanim system_data_file:dir read; 


allow bootanim graphics_device:chr_file { read ioctl open };



typeattribute bootanim system_writes_vendor_properties_violators;

set_prop(bootanim, qemu_prop)

target/board/generic/sepolicy/surfaceflinger.te

+1 −0
Original line number Diff line number Diff line 
allow surfaceflinger self:process execmem;

allow surfaceflinger ashmem_device:chr_file execute;



typeattribute surfaceflinger system_writes_vendor_properties_violators;

set_prop(surfaceflinger, qemu_prop)

target/board/generic/sepolicy/zygote.te

+1 −0
Original line number Diff line number Diff line 
typeattribute zygote system_writes_vendor_properties_violators;

set_prop(zygote, qemu_prop)

# TODO (b/63631799) fix this access

# Suppress denials to storage. Webview zygote should not be accessing.