From c2a5c2be5c061410adf4b1af717d1fdbc5d53eed Mon Sep 17 00:00:00 2001 From: Kshitij Gupta Date: Sun, 23 Aug 2020 09:06:51 +0000 Subject: [PATCH] sm7250-common: sepolicy: dontaudit untrusted_app to open ashmem_device - Fixes scroll lag in many apps, such as Twitter: W RenderThread: type=1400 audit(0.0:12371): avc: denied { open } for path=/dev/ashmem dev=tmpfs ino=10848 scontext=u:r:untrusted_app:s0:c123,c256,c512,c768 tcontext=u:object_r:ashmem_device:s0 tclass=chr_file permissive=0 app=com.twitter.android - Apps are no longer allowed open access to /dev/ashmem, unless they target API level < Q. - https://android.googlesource.com/platform/system/sepolicy/+/8b12ff5f218139102d8eec90c91b114078be4402 Change-Id: I6405786fea05891642d8437acafcd8c891d75912 --- sepolicy/vendor/dontaudit.te | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 sepolicy/vendor/dontaudit.te diff --git a/sepolicy/vendor/dontaudit.te b/sepolicy/vendor/dontaudit.te new file mode 100644 index 0000000..2b1c4e1 --- /dev/null +++ b/sepolicy/vendor/dontaudit.te @@ -0,0 +1,3 @@ +# Apps are no longer allowed open access to /dev/ashmem, unless they +# target API level < Q. +dontaudit untrusted_app ashmem_device:chr_file open;