commit 67896eef072e9e232a19475c594986d7dc9b913d
author Jeff Vander Stoep <jeffv@google.com> Thu Apr 02 13:36:17 2020 +0200
committer Jeff Vander Stoep <jeffv@google.com> Thu Apr 02 13:43:26 2020 +0200
tree 3bb419e53c7015db1f30b48305e7879f039035fe
parent cb4138129a17fa3353e9772f843f47f020d8208c

Reduce graphics logspam

There is no change in behavior. These denials were already
being blocked.

Bug: 79617173
Test: build
Change-Id: Iffd1e5ba42854615eeea9490fe9150678ac98796

private/surfaceflinger.te

diff --git a/private/surfaceflinger.te b/private/surfaceflinger.te
index 97203ba..cf709df 100644
--- a/private/surfaceflinger.te
+++ b/private/surfaceflinger.te
@@ -126,6 +126,9 @@
     unix_socket_send(surfaceflinger, statsdw, statsd)
 ')
 
+# Surfaceflinger should not be reading default vendor-defined properties.
+dontaudit surfaceflinger vendor_default_prop:file read;
+
 ###
 ### Neverallow rules
 ###