sm7250-common: sepolicy: dontaudit untrusted_app to open ashmem_device

- Fixes scroll lag in many apps, such as Twitter:
    W RenderThread: type=1400 audit(0.0:12371): avc: denied { open } for path=/dev/ashmem dev=tmpfs ino=10848 scontext=u:r:untrusted_app:s0:c123,c256,c512,c768 tcontext=u:object_r:ashmem_device:s0 tclass=chr_file permissive=0 app=com.twitter.android

- Apps are no longer allowed open access to /dev/ashmem, unless they
  target API level < Q.

- 8b12ff5f21

Change-Id: I6405786fea05891642d8437acafcd8c891d75912
This commit is contained in:
Kshitij Gupta
2020-08-23 09:06:51 +00:00
committed by Sandeep P S
parent 1add6a0350
commit c2a5c2be5c

3
sepolicy/vendor/dontaudit.te vendored Normal file
View File

@@ -0,0 +1,3 @@
# Apps are no longer allowed open access to /dev/ashmem, unless they
# target API level < Q.
dontaudit untrusted_app ashmem_device:chr_file open;