Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit f1a55571 authored by Treehugger Robot's avatar Treehugger Robot Committed by Gerrit Code Review
Browse files

Merge "Temporarily whitelisting system domains writing vendor props"

parents c5fd9bf0 6b79c9b7

target/board/generic/sepolicy/bootanim.te

+1 −0
Original line number Diff line number Diff line
@@ -5,4 +5,5 @@ dontaudit bootanim system_data_file:dir read; 


allow bootanim graphics_device:chr_file { read ioctl open };



typeattribute bootanim system_writes_vendor_properties_violators;

set_prop(bootanim, qemu_prop)

target/board/generic/sepolicy/surfaceflinger.te

+1 −0
Original line number Diff line number Diff line 
allow surfaceflinger self:process execmem;

allow surfaceflinger ashmem_device:chr_file execute;



typeattribute surfaceflinger system_writes_vendor_properties_violators;

set_prop(surfaceflinger, qemu_prop)

target/board/generic/sepolicy/zygote.te

+1 −0
Original line number Diff line number Diff line 
typeattribute zygote system_writes_vendor_properties_violators;

set_prop(zygote, qemu_prop)

# TODO (b/63631799) fix this access

# Suppress denials to storage. Webview zygote should not be accessing.