diff options
| author | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | 2024-05-10 15:33:22 +0000 |
|---|---|---|
| committer | Android Build Coastguard Worker <android-build-coastguard-worker@google.com> | 2024-05-10 15:33:22 +0000 |
| commit | 41de41a3d9b4b0210446fcfc049994a4a1dc0cb6 (patch) | |
| tree | db4467636d682fe07349b82adeaf30f4f6e39079 | |
| parent | b7b7ea2a6db289aadcd0a586996abd6292db9a18 (diff) | |
| parent | bdaa9992b8aded061c59171a2781e59e74f8b313 (diff) | |
| download | coral-sepolicy-busytown-mac-infra-release.tar.gz | |
Snap for 11819167 from bdaa9992b8aded061c59171a2781e59e74f8b313 to busytown-mac-infra-releasebusytown-mac-infra-release
Change-Id: I3ebe1d2a690cd84e3f278b63358890fb4968e056
| -rw-r--r-- | system_ext/private/property_contexts | 6 | ||||
| -rw-r--r-- | vendor/google/e2fs.te | 2 | ||||
| -rw-r--r-- | vendor/google/fsck.te | 2 | ||||
| -rw-r--r-- | vendor/qcom/common/hal_drm_clearkey.te | 2 | ||||
| -rw-r--r-- | vendor/qcom/common/hal_drm_widevine.te | 2 |
5 files changed, 6 insertions, 8 deletions
diff --git a/system_ext/private/property_contexts b/system_ext/private/property_contexts index c9e51d6..b22926f 100644 --- a/system_ext/private/property_contexts +++ b/system_ext/private/property_contexts @@ -2,9 +2,3 @@ pixel.oslo.airplane_mode.allowed_override u:object_r:pixel_oslo_debug_prop:s0 pixel.oslo.allowed_override u:object_r:pixel_oslo_debug_prop:s0 pixel.oslo.gating u:object_r:pixel_oslo_debug_prop:s0 - -# Boot animation dynamic colors -persist.bootanim.color1 u:object_r:bootanim_system_prop:s0 exact int -persist.bootanim.color2 u:object_r:bootanim_system_prop:s0 exact int -persist.bootanim.color3 u:object_r:bootanim_system_prop:s0 exact int -persist.bootanim.color4 u:object_r:bootanim_system_prop:s0 exact int diff --git a/vendor/google/e2fs.te b/vendor/google/e2fs.te new file mode 100644 index 0000000..4d2b596 --- /dev/null +++ b/vendor/google/e2fs.te @@ -0,0 +1,2 @@ +allow e2fs sysfs_scsi_devices_0000:dir r_dir_perms; +allow e2fs sysfs_scsi_devices_0000:file r_file_perms; diff --git a/vendor/google/fsck.te b/vendor/google/fsck.te index 1500b5f..7d94ea1 100644 --- a/vendor/google/fsck.te +++ b/vendor/google/fsck.te @@ -1 +1,3 @@ allow fsck persist_block_device:blk_file rw_file_perms; +allow fsck sysfs_scsi_devices_0000:dir r_dir_perms; +allow fsck sysfs_scsi_devices_0000:file r_file_perms; diff --git a/vendor/qcom/common/hal_drm_clearkey.te b/vendor/qcom/common/hal_drm_clearkey.te index 013705a..8267db8 100644 --- a/vendor/qcom/common/hal_drm_clearkey.te +++ b/vendor/qcom/common/hal_drm_clearkey.te @@ -7,5 +7,5 @@ hal_server_domain(hal_drm_clearkey, hal_drm) vndbinder_use(hal_drm_clearkey); -allow hal_drm_clearkey { appdomain -isolated_app }:fd use; +allow hal_drm_clearkey { appdomain -isolated_app_all }:fd use; allow hal_drm_clearkey hal_allocator_server:fd use; diff --git a/vendor/qcom/common/hal_drm_widevine.te b/vendor/qcom/common/hal_drm_widevine.te index 2f8fbdd..40f431a 100644 --- a/vendor/qcom/common/hal_drm_widevine.te +++ b/vendor/qcom/common/hal_drm_widevine.te @@ -10,6 +10,6 @@ allow hal_drm_widevine mediadrm_vendor_data_file:file create_file_perms; allow hal_drm_widevine hal_display_config_hwservice:hwservice_manager find; binder_call(hal_drm_widevine, hal_graphics_composer_default) -allow hal_drm_widevine { appdomain -isolated_app }:fd use; +allow hal_drm_widevine { appdomain -isolated_app_all }:fd use; allow hal_drm_widevine qce_device:chr_file rw_file_perms; |