sm6150-common: sepolicy: Dontaudit untrusted_app to open ashmem_device

- Fixes scroll lag in many apps, such as Twitter:
    W RenderThread: type=1400 audit(0.0:12371): avc: denied { open } for path=/dev/ashmem dev=tmpfs ino=10848 scontext=u:r:untrusted_app:s0:c123,c256,c512,c768 tcontext=u:object_r:ashmem_device:s0 tclass=chr_file permissive=0 app=com.twitter.android
- Apps are no longer allowed open access to /dev/ashmem, unless they
  target API level < Q.
  (8b12ff5f21)

Change-Id: I6d1763f439f1a0998a425d5203242b39b3631510
Signed-off-by: Richard Raya <rdxzv.dev@gmail.com>
Signed-off-by: donjohanliebert <donjohanliebert@gmail.com>
This commit is contained in:
Kshitij Gupta 2020-08-23 09:06:51 +00:00 committed by donjohanliebert
parent 3942fef8e7
commit a8158c5ae8

3
sepolicy/vendor/dontaudit.te vendored Normal file
View File

@ -0,0 +1,3 @@
# Apps are no longer allowed open access to /dev/ashmem, unless they
# target API level < Q.
dontaudit untrusted_app ashmem_device:chr_file open;