summaryrefslogtreecommitdiffstats
path: root/common/surfaceflinger.te
diff options
context:
space:
mode:
authorZohaib Alam <zalam@codeaurora.org>2014-11-13 09:12:02 -0500
committerPing Li <pingli@codeaurora.org>2014-12-15 23:54:31 -0800
commitbbd41752706c691a039d52ba5b674a914cfb11e3 (patch)
tree1483a2b366fed04b9a0b73873c22cb436e6d509a /common/surfaceflinger.te
parent76af6c79f100cf8fb43f682e3b80f59d83ab7de0 (diff)
downloadandroid_device_qcom_sepolicy-bbd41752706c691a039d52ba5b674a914cfb11e3.tar.gz
android_device_qcom_sepolicy-bbd41752706c691a039d52ba5b674a914cfb11e3.tar.bz2
android_device_qcom_sepolicy-bbd41752706c691a039d52ba5b674a914cfb11e3.zip
Seandroid: Add policies to enable all QDCM functionalities.
Address all SELinux denial messages related to QDCM tool functionality and the color service SDK application. Add policies to allow: 1- /persist/ read & write for display confid 2- /data/misc/display/ read & write 3- Allow access to colorservice for display sdk from android app. 4- Enable pp-daemon functionalities for the non user-debug and eng builds, since OEMs actively use QDCM tool, and they require full functionality. Change-Id: I43545eaf8e63f0e43f40197cd01cddc8c6a5351a
Diffstat (limited to 'common/surfaceflinger.te')
-rw-r--r--common/surfaceflinger.te5
1 files changed, 1 insertions, 4 deletions
diff --git a/common/surfaceflinger.te b/common/surfaceflinger.te
index 9c984ace..854ff8c7 100644
--- a/common/surfaceflinger.te
+++ b/common/surfaceflinger.te
@@ -2,10 +2,7 @@ allow surfaceflinger sysfs_graphics:file rw_file_perms;
allow surfaceflinger shell_data_file:dir search;
# Allows pp-daemon to refresh the screen in calibration mode
-userdebug_or_eng(`
- allow surfaceflinger mm-pp-daemon:dir search;
- allow surfaceflinger mm-pp-daemon:file r_file_perms;
-')
+r_dir_file(surfaceflinger, mm-pp-daemon)
binder_call(surfaceflinger, location)
binder_call(surfaceflinger, tee)