From 3107a6c3708638d1f5bfdb787c29e7fb005a66a2 Mon Sep 17 00:00:00 2001
From: Yifan Hong <elsk@google.com>
Date: Wed, 15 Mar 2017 13:38:28 -0700
Subject: [PATCH] Allow system_server binder_call into hal_graphics_allocator
Test: no log spam for graphics allocator
Test: dmesg | audit2allow does not show denial for
hal_graphics_allocator_default
Test: system is responsive after boot (because
android.hardware.graphics.allocator@2.0::IAllocator getService()
will not be blocked)
Bug: 36220026
Change-Id: I3e103f88988fe4a94888e92ee8c5b1f27845ad9e
---
private/system_server.te | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/private/system_server.te b/private/system_server.te
index f25e8ce7f..516ace48b 100644
--- a/private/system_server.te
+++ b/private/system_server.te
@@ -177,7 +177,8 @@ hwallocator_use(system_server)
binder_call(system_server, hal_boot)
binder_call(system_server, hal_contexthub)
hal_client_domain(system_server, hal_fingerprint)
-binder_call(system_server, hal_gnss);
+binder_call(system_server, hal_gnss)
+binder_call(system_server, hal_graphics_allocator)
binder_call(system_server, hal_ir)
binder_call(system_server, hal_light)
binder_call(system_server, hal_memtrack)
--
GitLab