summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAmit Pundir <amit.pundir@linaro.org>2023-09-06 01:39:08 +0000
committerAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>2023-09-06 01:39:08 +0000
commitcdbe4f653c003ad167fe214490d79e570a7eb3e2 (patch)
tree16075331556c86f7b10400794df06ead1b88d2f2
parent324477af1114d1020fe88f001c839e95921d16f4 (diff)
parentf0d9548b2fcc872c5f8cb812ba710fa3730ad5ca (diff)
downloadminigbm-cdbe4f653c003ad167fe214490d79e570a7eb3e2.tar.gz
android: sepolicy: Add minigbm SELinux policies am: d046ea007f am: 4fdfa15abc am: 11ffa74c39 am: f0d9548b2f
Original change: https://android-review.googlesource.com/c/platform/external/minigbm/+/2666755 Change-Id: I2fdd0b4bad56be2638706af7ee09e94876b9413e Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
-rw-r--r--cros_gralloc/sepolicy/cameraserver.te3
-rw-r--r--cros_gralloc/sepolicy/mediaswcodec.te3
-rw-r--r--cros_gralloc/sepolicy/system_server.te3
3 files changed, 9 insertions, 0 deletions
diff --git a/cros_gralloc/sepolicy/cameraserver.te b/cros_gralloc/sepolicy/cameraserver.te
new file mode 100644
index 0000000..654c6bb
--- /dev/null
+++ b/cros_gralloc/sepolicy/cameraserver.te
@@ -0,0 +1,3 @@
+# Suppress warnings for minigbm trying to read vendor.minigbm.debug
+# property for the devices which do not use this property.
+dontaudit cameraserver vendor_default_prop:file read;
diff --git a/cros_gralloc/sepolicy/mediaswcodec.te b/cros_gralloc/sepolicy/mediaswcodec.te
new file mode 100644
index 0000000..a39fd73
--- /dev/null
+++ b/cros_gralloc/sepolicy/mediaswcodec.te
@@ -0,0 +1,3 @@
+# Suppress warnings for minigbm trying to read vendor.minigbm.debug
+# property for the devices which do not use this property.
+dontaudit mediaswcodec vendor_default_prop:file read;
diff --git a/cros_gralloc/sepolicy/system_server.te b/cros_gralloc/sepolicy/system_server.te
new file mode 100644
index 0000000..402dea6
--- /dev/null
+++ b/cros_gralloc/sepolicy/system_server.te
@@ -0,0 +1,3 @@
+# Suppress warnings for minigbm trying to read vendor.minigbm.debug
+# property for the devices which do not use this property.
+dontaudit system_server vendor_default_prop:file read;