diff options
Diffstat (limited to 'common/hal_memtrack.te')
| -rw-r--r-- | common/hal_memtrack.te | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/common/hal_memtrack.te b/common/hal_memtrack.te index 8bdf4d3d..55b6e346 100644 --- a/common/hal_memtrack.te +++ b/common/hal_memtrack.te @@ -30,4 +30,5 @@ r_dir_file(hal_memtrack_default, kgsl_debugfs); # Memtrack reads proc/<pid>/cmdline to check if process is surfaceflinger. # Grant access if that's the case; don't log denials for other processes. allow hal_memtrack_default surfaceflinger:file read; -dontaudit hal_memtrack_default { domain -surfaceflinger}:file read; +dontaudit hal_memtrack_default { domain -surfaceflinger }:dir search; +dontaudit hal_memtrack_default { domain -surfaceflinger }:file { open read getattr }; |