diff --git a/private/app.te b/private/app.te index 98fcce0f14571112c91fede409bf641f6a5e2102..4097bfc5304f2de6b4b1de1a551dc19c95195188 100644 --- a/private/app.te +++ b/private/app.te @@ -249,8 +249,6 @@ allowxperm { appdomain -bluetooth } self:{ rawip_socket tcp_socket udp_socket } allow { appdomain -isolated_app } ion_device:chr_file rw_file_perms; # TODO is write really necessary ? auditallow { appdomain userdebug_or_eng(`-su') } ion_device:chr_file { write append }; -# TODO audit ion ioctl usage by apps -auditallow { appdomain userdebug_or_eng(`-su') } ion_device:chr_file ioctl; allow { appdomain -isolated_app } hal_graphics_allocator:fd use;