• Nick Kralevich's avatar
    Revert "Make surfaceflinger domain enforcing." · 5f290264
    Nick Kralevich authored
    There are continued complaints about not being able to generate
    bug reports and surfaceflinger crashes. Move surfaceflinger
    out of enforcing until I can resolve this.
    
    Here are some denials I'm seeing. I'm not sure what binder service is
    running in the shell domain... Need to do more digging.
    
    nnk@nnk:~/Downloads$ grep "avc: " screenshot_runtime_restart.txt  | grep surfaceflinger
    <5>[    5.182699] type=1400 audit(1389111729.860:9): avc:  denied  { search } for  pid=186 comm="surfaceflinger" name="tmp" dev="mmcblk0p28" ino=627090 scontext=u:r:surfaceflinger:s0 tcontext=u:object_r:shell_data_file:s0 tclass=dir
    <5>[  744.988702] type=1400 audit(1389112469.578:188): avc:  denied  { call } for  pid=596 comm="Binder_3" scontext=u:r:surfaceflinger:s0 tcontext=u:r:shell:s0 tclass=binder
    
    This reverts commit a11c56e1.
    
    Bug: 12416329
    Change-Id: I7b72608c760c4087f73047ad751a5bd069fa2ec7
    5f290264
surfaceflinger.te 1.41 KB