From 523f856d9ecc67caa475f1dbc439136110783c28 Mon Sep 17 00:00:00 2001
From: ChengYou Ho <chengyouho@google.com>
Date: Thu, 23 Apr 2020 17:04:17 +0800
Subject: [PATCH] sdm660-common: sepolicy: Allow surfaceflinger to search
 hal_graphics_composer_default

[log]
avc: denied { search } dev="proc" scontext=u:r:surfaceflinger:s0
tcontext=u:r:hal_graphics_composer_default:s0 tclass=dir permissive=0

Bug: 154688047
Change-Id: Ia9735f2b938f57c37f741d6f0526cf29df180fcb
Signed-off-by: pix106 <sbordenave@gmail.com>
---
 sepolicy/vendor/surfaceflinger.te | 2 ++
 1 file changed, 2 insertions(+)
 create mode 100644 sepolicy/vendor/surfaceflinger.te

diff --git a/sepolicy/vendor/surfaceflinger.te b/sepolicy/vendor/surfaceflinger.te
new file mode 100644
index 00000000..325b3c89
--- /dev/null
+++ b/sepolicy/vendor/surfaceflinger.te
@@ -0,0 +1,2 @@
+#============= surfaceflinger ==============
+allow surfaceflinger hal_graphics_composer_default:dir search;