summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAmit Pundir <amit.pundir@linaro.org>2023-09-06 03:23:06 +0000
committerAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>2023-09-06 03:23:06 +0000
commit1a92623ee0cc9ca3440d250c96669fd6e48d423d (patch)
tree16075331556c86f7b10400794df06ead1b88d2f2
parent857b0d9a29bfb5db34b7f3b532c2faa5a59103f4 (diff)
parentcdbe4f653c003ad167fe214490d79e570a7eb3e2 (diff)
downloadminigbm-1a92623ee0cc9ca3440d250c96669fd6e48d423d.tar.gz
android: sepolicy: Add minigbm SELinux policies am: d046ea007f am: 4fdfa15abc am: 11ffa74c39 am: f0d9548b2f am: cdbe4f653c
Original change: https://android-review.googlesource.com/c/platform/external/minigbm/+/2666755 Change-Id: I6def5af6cab8e3a086d1408083a9c5ef5b6c7cae Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
-rw-r--r--cros_gralloc/sepolicy/cameraserver.te3
-rw-r--r--cros_gralloc/sepolicy/mediaswcodec.te3
-rw-r--r--cros_gralloc/sepolicy/system_server.te3
3 files changed, 9 insertions, 0 deletions
diff --git a/cros_gralloc/sepolicy/cameraserver.te b/cros_gralloc/sepolicy/cameraserver.te
new file mode 100644
index 0000000..654c6bb
--- /dev/null
+++ b/cros_gralloc/sepolicy/cameraserver.te
@@ -0,0 +1,3 @@
+# Suppress warnings for minigbm trying to read vendor.minigbm.debug
+# property for the devices which do not use this property.
+dontaudit cameraserver vendor_default_prop:file read;
diff --git a/cros_gralloc/sepolicy/mediaswcodec.te b/cros_gralloc/sepolicy/mediaswcodec.te
new file mode 100644
index 0000000..a39fd73
--- /dev/null
+++ b/cros_gralloc/sepolicy/mediaswcodec.te
@@ -0,0 +1,3 @@
+# Suppress warnings for minigbm trying to read vendor.minigbm.debug
+# property for the devices which do not use this property.
+dontaudit mediaswcodec vendor_default_prop:file read;
diff --git a/cros_gralloc/sepolicy/system_server.te b/cros_gralloc/sepolicy/system_server.te
new file mode 100644
index 0000000..402dea6
--- /dev/null
+++ b/cros_gralloc/sepolicy/system_server.te
@@ -0,0 +1,3 @@
+# Suppress warnings for minigbm trying to read vendor.minigbm.debug
+# property for the devices which do not use this property.
+dontaudit system_server vendor_default_prop:file read;