unplugged-vendor/device/linaro/dragonboard/sepolicy/hal_memtrack.te

5 lines
254 B
Plaintext
Raw Normal View History

# Memtrack reads proc/<pid>/cmdline to check if process is surfaceflinger.
# Grant access if that's the case; don't log denials for other processes.
allow hal_memtrack surfaceflinger:file read;
dontaudit hal_memtrack { domain -surfaceflinger}:file read;