| commit | 59c4aa755b186cc2b0c098cdee4ff1296f20d1ab | [log] [tgz] |
|---|---|---|
| author | Nick Kralevich <nnk@google.com> | Wed Sep 02 03:57:37 2015 +0000 |
| committer | Gerrit Code Review <noreply-gerritcodereview@google.com> | Wed Sep 02 03:57:37 2015 +0000 |
| tree | ac2fe976da5de8c08aa2c58c65d9aa6f417d7230 | |
| parent | 0243e5cf4f8898b7acedc24efd58fdcd163e3048 [diff] | |
| parent | 73bdbd9811dc2950c05bcc18f200326c4e5d6714 [diff] |
Merge "auditallow gpu_device execute access"
diff --git a/app.te b/app.te index 583495e..9431fd1 100644 --- a/app.te +++ b/app.te
@@ -108,6 +108,7 @@ # Grant GPU access to all processes started by Zygote. # They need that to render the standard UI. allow { appdomain -isolated_app } gpu_device:chr_file { rw_file_perms execute }; +auditallow { appdomain -isolated_app } gpu_device:chr_file execute; # Use the Binder. binder_use(appdomain)