diff options
| author | SimHyunYong <jonesn5508@gmail.com> | 2016-01-26 16:33:44 +0900 |
|---|---|---|
| committer | SimHyunYong <jonesn5508@gmail.com> | 2016-01-26 16:33:44 +0900 |
| commit | 7171232c02d27e777ad2267f1a8b5246b3aabc8d (patch) | |
| tree | d4339e140588f404416a8dbcc1614d7dcfc6e66a | |
| parent | 0220b345b39fa7781e3a352ecf84f45bc29016ab (diff) | |
| download | sepolicy-7171232c02d27e777ad2267f1a8b5246b3aabc8d.tar.gz | |
Delete policy it is alread included in binder_call macros.
define(`binder_call', `
allow $1 $2:binder { call transfer };
allow $2 $1:binder transfer;
allow $1 $2:fd use;
')
binder_call(surfaceflinger, appdomain)
binder_call(surfaceflinger, bootanim)
it is alread include these policy.. so I can delete these policy!
allow surfaceflinger appdomain:fd use;
allow surfaceflinger bootanim:fd use;
| -rw-r--r-- | surfaceflinger.te | 4 |
1 files changed, 0 insertions, 4 deletions
diff --git a/surfaceflinger.te b/surfaceflinger.te index 5d1199d..fbe1dd0 100644 --- a/surfaceflinger.te +++ b/surfaceflinger.te @@ -38,12 +38,8 @@ set_prop(surfaceflinger, system_prop) set_prop(surfaceflinger, ctl_bootanim_prop) # Use open files supplied by an app. -allow surfaceflinger appdomain:fd use; allow surfaceflinger app_data_file:file { read write }; -# Use open file provided by bootanim. -allow surfaceflinger bootanim:fd use; - # Allow a dumpstate triggered screenshot binder_call(surfaceflinger, dumpstate) binder_call(surfaceflinger, shell) |