am 53cde700: Report graphics_device accesses by system_server or mediaserver.

* commit '53cde700': Report graphics_device accesses by system_server or mediaserver.

am 53cde700: Report graphics_device accesses by system_server or mediaserver.
8c836899 · Stephen Smalley · Android Git Automerger · d7e5ef7e · 53cde700 · 8c836899
Commit 8c836899 authored 11 years ago by Stephen Smalley Committed by Android Git Automerger 11 years ago
--- a/mediaserver.te
+++ b/mediaserver.te
@@ -24,6 +24,7 @@ allow mediaserver app_data_file:dir search;
 allow mediaserver app_data_file:file rw_file_perms;
 allow mediaserver sdcard_type:file write;
 allow mediaserver { gpu_device graphics_device }:chr_file rw_file_perms;
+auditallow mediaserver graphics_device:chr_file rw_file_perms;
 allow mediaserver video_device:dir r_dir_perms;
 allow mediaserver video_device:chr_file rw_file_perms;
 allow mediaserver audio_device:dir r_dir_perms;

--- a/system_server.te
+++ b/system_server.te
@@ -152,6 +152,7 @@ allow system_server alarm_device:chr_file rw_file_perms;
 allow system_server gpu_device:chr_file rw_file_perms;
 allow system_server graphics_device:dir search;
 allow system_server graphics_device:chr_file rw_file_perms;
+auditallow system_server graphics_device:chr_file rw_file_perms;
 allow system_server iio_device:chr_file rw_file_perms;
 allow system_server input_device:dir r_dir_perms;
 allow system_server input_device:chr_file rw_file_perms;