From 7171232c02d27e777ad2267f1a8b5246b3aabc8d Mon Sep 17 00:00:00 2001 From: SimHyunYong <jonesn5508@gmail.com> Date: Tue, 26 Jan 2016 16:33:44 +0900 Subject: [PATCH] Delete policy it is alread included in binder_call macros. define(`binder_call', ` allow $1 $2:binder { call transfer }; allow $2 $1:binder transfer; allow $1 $2:fd use; ') binder_call(surfaceflinger, appdomain) binder_call(surfaceflinger, bootanim) it is alread include these policy.. so I can delete these policy! allow surfaceflinger appdomain:fd use; allow surfaceflinger bootanim:fd use; --- surfaceflinger.te | 4 ---- 1 file changed, 4 deletions(-) diff --git a/surfaceflinger.te b/surfaceflinger.te index 5d1199dd6..fbe1dd00d 100644 --- a/surfaceflinger.te +++ b/surfaceflinger.te @@ -38,12 +38,8 @@ set_prop(surfaceflinger, system_prop) set_prop(surfaceflinger, ctl_bootanim_prop) # Use open files supplied by an app. -allow surfaceflinger appdomain:fd use; allow surfaceflinger app_data_file:file { read write }; -# Use open file provided by bootanim. -allow surfaceflinger bootanim:fd use; - # Allow a dumpstate triggered screenshot binder_call(surfaceflinger, dumpstate) binder_call(surfaceflinger, shell) -- GitLab