| commit | 69faf0b8d12e9ebc53d1fcd538373782170d27d9 | [log] [tgz] |
|---|---|---|
| author | Treehugger Robot <treehugger-gerrit@google.com> | Wed Dec 08 07:26:55 2021 +0000 |
| committer | Gerrit Code Review <noreply-gerritcodereview@google.com> | Wed Dec 08 07:26:55 2021 +0000 |
| tree | ebdc7903e573b3dda92c482f8a9bb3203f5cc8f8 | |
| parent | a1a894be500af6d9040578b98a96067d8ab2f1bf [diff] | |
| parent | 8cb0bb81f0335bd2b65c61fb29143f14406ad4de [diff] |
Merge "sepolicy: Fix potential avc denials"
diff --git a/private/mediaprovider_app.te b/private/mediaprovider_app.te index 0e1b1a0..82dcdb2 100644 --- a/private/mediaprovider_app.te +++ b/private/mediaprovider_app.te
@@ -62,6 +62,7 @@ allow mediaprovider_app gpu_device:dir search; dontaudit mediaprovider_app sysfs_vendor_sched:dir search; +dontaudit mediaprovider_app sysfs_vendor_sched:file w_file_perms; # bpfprog access for FUSE BPF allow mediaprovider_app fs_bpf:dir search;