summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAmit Pundir <amit.pundir@linaro.org>2023-09-06 00:19:08 +0000
committerAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>2023-09-06 00:19:08 +0000
commitf0d9548b2fcc872c5f8cb812ba710fa3730ad5ca (patch)
tree16075331556c86f7b10400794df06ead1b88d2f2
parentdc48ba78fd8e7421426a0f8bbc96430cac2df2fb (diff)
parent11ffa74c394cd9c6ac7874ec7ef897b50a39b591 (diff)
downloadminigbm-f0d9548b2fcc872c5f8cb812ba710fa3730ad5ca.tar.gz
android: sepolicy: Add minigbm SELinux policies am: d046ea007f am: 4fdfa15abc am: 11ffa74c39
Original change: https://android-review.googlesource.com/c/platform/external/minigbm/+/2666755 Change-Id: If068fc5b9c8d0cbe2f8f1944a03001b3cfc81b35 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
-rw-r--r--cros_gralloc/sepolicy/cameraserver.te3
-rw-r--r--cros_gralloc/sepolicy/mediaswcodec.te3
-rw-r--r--cros_gralloc/sepolicy/system_server.te3
3 files changed, 9 insertions, 0 deletions
diff --git a/cros_gralloc/sepolicy/cameraserver.te b/cros_gralloc/sepolicy/cameraserver.te
new file mode 100644
index 0000000..654c6bb
--- /dev/null
+++ b/cros_gralloc/sepolicy/cameraserver.te
@@ -0,0 +1,3 @@
+# Suppress warnings for minigbm trying to read vendor.minigbm.debug
+# property for the devices which do not use this property.
+dontaudit cameraserver vendor_default_prop:file read;
diff --git a/cros_gralloc/sepolicy/mediaswcodec.te b/cros_gralloc/sepolicy/mediaswcodec.te
new file mode 100644
index 0000000..a39fd73
--- /dev/null
+++ b/cros_gralloc/sepolicy/mediaswcodec.te
@@ -0,0 +1,3 @@
+# Suppress warnings for minigbm trying to read vendor.minigbm.debug
+# property for the devices which do not use this property.
+dontaudit mediaswcodec vendor_default_prop:file read;
diff --git a/cros_gralloc/sepolicy/system_server.te b/cros_gralloc/sepolicy/system_server.te
new file mode 100644
index 0000000..402dea6
--- /dev/null
+++ b/cros_gralloc/sepolicy/system_server.te
@@ -0,0 +1,3 @@
+# Suppress warnings for minigbm trying to read vendor.minigbm.debug
+# property for the devices which do not use this property.
+dontaudit system_server vendor_default_prop:file read;