commit e17b293528890494b09460520c9f2e8838b59a0a
author Jiwen 'Steve' Cai <jwcai@google.com> Fri Jan 04 19:14:07 2019 -0800
committer Jiwen 'Steve' Cai <jwcai@google.com> Mon Jan 14 10:49:35 2019 -0800
tree 0ed62f5357a501a306284448c5348c3ca9c15d1d
parent 20756085829a0d7d79463eab5a555bf4b0556f1a

Allow app to conntect to BufferHub service

Bug: 112940221
Test: AHardwareBufferTest
Change-Id: I1fd065844e03c7e079dc40b7f7dbb8968f1b00bc

private/app_neverallows.te

diff --git a/private/app_neverallows.te b/private/app_neverallows.te
index 0a81726..9c96f19 100644
--- a/private/app_neverallows.te
+++ b/private/app_neverallows.te
@@ -294,6 +294,7 @@
 neverallow all_untrusted_apps {
   coredomain_hwservice
   -same_process_hwservice
+  -fwk_bufferhub_hwservice # Designed for use by any domain
   -hidl_allocator_hwservice # Designed for use by any domain
   -hidl_manager_hwservice # Designed for use by any domain
   -hidl_memory_hwservice # Designed for use by any domain