app: remove permission to execute gpu_device am: 1911c27f

am: 8e53bb8d * commit '8e53bb8d': app: remove permission to execute gpu_device

app: remove permission to execute gpu_device am: 1911c27f
824da638 · Jeff Vander Stoep · android-build-merger · dd4fa22f · 8e53bb8d · 824da638
Commit 824da638 authored 9 years ago by Jeff Vander Stoep Committed by android-build-merger 9 years ago
--- a/app.te
+++ b/app.te
@@ -123,8 +123,7 @@ allow appdomain qtaguid_device:chr_file r_file_perms;

 # Grant GPU access to all processes started by Zygote.
 # They need that to render the standard UI.
-allow { appdomain -isolated_app } gpu_device:chr_file { rw_file_perms execute };
-auditallow { appdomain -isolated_app } gpu_device:chr_file execute;
+allow { appdomain -isolated_app } gpu_device:chr_file rw_file_perms;

 # Use the Binder.
 binder_use(appdomain)