diff options
| author | Amit Pundir <amit.pundir@linaro.org> | 2020-02-19 00:12:48 +0530 |
|---|---|---|
| committer | Amit Pundir <amit.pundir@linaro.org> | 2020-04-01 17:42:28 +0530 |
| commit | 1153b9c8b4fb7d0a08c1abb0501e5909e154d26f (patch) | |
| tree | f5d1790c82ba3ddbded9ce86156d4dd87680d52c /sepolicy | |
| parent | 456949d4764bb4087ebbba57f8bd90f4d0131342 (diff) | |
sepolicy: dontaudit getattr access to graphics_device
dmesg and logcat is filled with selinux denials
related to getting access to graphics device
attributes.
From bootanimation to all the way up to video
playback, all display/graphics related apps/services
seem to need access to graphics device attributes.
Although the denials are non-fatal but it is good
to get rid of the denial messages.
Change-Id: Ic65364c08b5de8aab8b22997ab5215304a4782ac
Signed-off-by: Amit Pundir <amit.pundir@linaro.org>
Diffstat (limited to 'sepolicy')
| -rw-r--r-- | sepolicy/te_macros | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sepolicy/te_macros b/sepolicy/te_macros index 322827a..3123f6b 100644 --- a/sepolicy/te_macros +++ b/sepolicy/te_macros @@ -5,4 +5,5 @@ define(`gpu_access', ` allow $1 dri_device:dir { open read search }; allow $1 sysfs_gpu:dir search; allow $1 sysfs_gpu:file { getattr open read }; +dontaudit $1 graphics_device:chr_file getattr; ') |