android_system_sepolicy/public/surfaceflinger.te

# surfaceflinger - display compositor service
type surfaceflinger, domain;
type surfaceflinger_tmpfs, file_type;
SE Android policy. 2012-01-04 09:33:27 -08:00			`# surfaceflinger - display compositor service`
remove more domain_deprecated Test: no denials showing up in log collection Test: device boots Bug: 28760354 Change-Id: I089cfcf486464952fcbb52cce9f6152caf662c23 2016-12-09 19:30:39 -08:00			`type surfaceflinger, domain;`
Initial selinux policy support for memfd Move all app tmpfs types to appdomain_tmpfs. These are still protected by mls categories and DAC. TODO clean up other app tmpfs types in a separate change. Treble-ize tmpfs passing between graphics composer HAL and surfaceflinger. Bug: 122854450 Test: boot Blueline with memfd enabled. Change-Id: Ib98aaba062f10972af6ae80fb85b7a0f60a32eee 2019-01-29 14:43:45 -08:00			`type surfaceflinger_tmpfs, file_type;`