diff options
| author | Charles Chen <liangyuchen@google.com> | 2023-02-01 22:31:30 +0000 |
|---|---|---|
| committer | charleschen <liangyuchen@google.com> | 2023-02-01 22:31:30 +0000 |
| commit | b5ad9c9e843d2f9e4f027342bbe3bed60704d4af (patch) | |
| tree | 76ffcff3ac07ae9ad82e3d1eff4f7985c2fc145c /sepolicy/app.te | |
| parent | e495815d940edee10196d56cb55930c4b7c7eca5 (diff) | |
Replace isolated_app with isolated_app_all (linaro)
Replace certain policies for isolated_app with the newly introduced
isolated_app_all to avoid hitting neverallow statement.
Bug: 267487579
Test: m
Change-Id: I42a798c4ba8bfe9237e9c1f16d478e5059061772
Diffstat (limited to 'sepolicy/app.te')
| -rw-r--r-- | sepolicy/app.te | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sepolicy/app.te b/sepolicy/app.te index 890e6e6..27030c9 100644 --- a/sepolicy/app.te +++ b/sepolicy/app.te @@ -1,4 +1,4 @@ # Few system/untrusted_app_xx apps eg. deskclock, # gallery3d et al. need read-only access to /dev/dri # as well, otherwise they don't open and crash. -gpu_access(appdomain -isolated_app) +gpu_access(appdomain -isolated_app_all) |