diff options
| author | Robert Craig <rpcraig@tycho.ncsc.mil> | 2013-12-02 11:48:48 -0500 |
|---|---|---|
| committer | Robert Craig <rpcraig@tycho.ncsc.mil> | 2013-12-02 12:22:29 -0500 |
| commit | ad8f4c50e7a7d63a801de58970fba3abe35762aa (patch) | |
| tree | 882be417b59162c1d12578db7a6f7e444bf93dc2 /sepolicy | |
| parent | 988038ce9e3e5482b4169d9fd506704b0a2cfc01 (diff) | |
| download | mako-ad8f4c50e7a7d63a801de58970fba3abe35762aa.tar.gz | |
[sepolicy] Address live wallpaper denial.
Fix the following denial seen on boot or when
switching to certain live wallpapers.
denied { execute } for pid=1020 comm="droid.phasebeam" path="/dev/kgsl-3d0" dev="tmpfs" ino=8665 scontext=u:r:shared_app:s0 tcontext=u:object_r:gpu_device:s0 tclass=chr_file
Change-Id: Ib2e8aac12d9b89b0fd0b6eb97b7e1517a13a164f
Diffstat (limited to 'sepolicy')
| -rw-r--r-- | sepolicy/app.te | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/sepolicy/app.te b/sepolicy/app.te index eb71391..d69d774 100644 --- a/sepolicy/app.te +++ b/sepolicy/app.te @@ -1,3 +1,6 @@ # Grant GPU access to all processes started by Zygote. # They need that to render the standard UI. allow appdomain gpu_device:chr_file rw_file_perms; + +# Some live wallpapers need. +allow shared_app gpu_device:chr_file execute; |