From b5ad9c9e843d2f9e4f027342bbe3bed60704d4af Mon Sep 17 00:00:00 2001 From: Charles Chen Date: Wed, 1 Feb 2023 22:31:30 +0000 Subject: Replace isolated_app with isolated_app_all (linaro) Replace certain policies for isolated_app with the newly introduced isolated_app_all to avoid hitting neverallow statement. Bug: 267487579 Test: m Change-Id: I42a798c4ba8bfe9237e9c1f16d478e5059061772 --- sepolicy/app.te | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sepolicy/app.te b/sepolicy/app.te index 890e6e6..27030c9 100644 --- a/sepolicy/app.te +++ b/sepolicy/app.te @@ -1,4 +1,4 @@ # Few system/untrusted_app_xx apps eg. deskclock, # gallery3d et al. need read-only access to /dev/dri # as well, otherwise they don't open and crash. -gpu_access(appdomain -isolated_app) +gpu_access(appdomain -isolated_app_all) -- cgit v1.2.3