diff --git a/surfaceflinger.te b/surfaceflinger.te index f0eeec3c8b22e22930a6d09d94880c13454d6bc8..00948cff271f8ca66068807a6fe448e3921df640 100644 --- a/surfaceflinger.te +++ b/surfaceflinger.te @@ -64,6 +64,17 @@ allow surfaceflinger surfaceflinger_service:service_manager { add find }; allow surfaceflinger system_server_service:service_manager find; allow surfaceflinger tmp_system_server_service:service_manager find; +# address tmp_system_server_service accesses +allow surfaceflinger { + power_service +}:service_manager find; + +service_manager_local_audit_domain(surfaceflinger) +auditallow surfaceflinger { + tmp_system_server_service + -power_service +}:service_manager find; + ### ### Neverallow rules ###