commit 4abd2a90a1a8cca8554b7e1e7d345cc02338720f
author Caleb Connolly <caleb.connolly@linaro.org> Tue Apr 05 17:15:03 2022 +0100
committer Caleb Connolly <caleb.connolly@linaro.org> Tue Apr 05 17:23:45 2022 +0100
tree 9e5b700735ca1b7cb2431817598c434fd7530977
parent d10b5fd7392fb7736b7b46d2b45cf88ae3d1481a

WIP: sepolicy: mostly fixup graphics denials

Still not done, need androidboot.selinux=permissive to get to UI.

~#============= platform_app ==============

~#!!!! This avc is a constraint violation.  You would need to modify the attributes of either the source or target types to allow this access.
~#Constraint rule:
~#       mlsconstrain file { write setattr append unlink link rename } ((t2 == app_data_file_type -Fail-)  or (t2 == appdomain_tmpfs -Fail-)  or (l1 eq l2 -Fail-)  or (t1 == mlstrustedsubject -Fail-)  or (t2 == mlstrustedobject -Fail-) ); Constraint DENIED

~#       Possible cause is the source level (s0:c512,c768) and target level (s0) are different.
allow platform_app hal_graphics_allocator_default_tmpfs:file write;
allow platform_app tmpfs:file { read write };