summaryrefslogtreecommitdiff
path: root/sepolicy/app.te
diff options
context:
space:
mode:
Diffstat (limited to 'sepolicy/app.te')
-rw-r--r--sepolicy/app.te4
1 files changed, 4 insertions, 0 deletions
diff --git a/sepolicy/app.te b/sepolicy/app.te
new file mode 100644
index 0000000..890e6e6
--- /dev/null
+++ b/sepolicy/app.te
@@ -0,0 +1,4 @@
+# Few system/untrusted_app_xx apps eg. deskclock,
+# gallery3d et al. need read-only access to /dev/dri
+# as well, otherwise they don't open and crash.
+gpu_access(appdomain -isolated_app)