MiPad4/android_device_xiaomi_sdm660-common
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

sdm660-common: Set PRODUCT_SET_DEBUGFS_RESTRICTIONS

Browse source 
Starting with Android R launched devices, debugfs cannot be mounted in
production builds. In order to avoid accidental debugfs dependencies
from creeping in during development with userdebug/eng builds, the
build flag PRODUCT_SET_DEBUGFS_RESTRICTIONS can be set by vendors to
enforce additional debugfs restrictions for userdebug/eng builds. The
same flag will be used to enable sepolicy neveallow statements to
prevent new permissions added for debugfs access.

Test: build, boot
Bug: 184381659
Change-Id: I45e6f20c886d467a215c9466f3a09965ff897d7e
Signed-off-by: pix106 <sbordenave@gmail.com>
This commit is contained in:
Hridya Valsaraju 2021-04-02 11:33:45 -07:00 committed by pix106
parent b8666f9e93
commit 986d0bd3c0
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
sdm660.mk
View file

@ -161,6 +161,9 @@ PRODUCT_COPY_FILES += \
frameworks/native/data/etc/android.hardware.consumerir.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.hardware.consumerir.xml frameworks/native/data/etc/android.hardware.consumerir.xml:$(TARGET_COPY_OUT_VENDOR)/etc/permissions/android.hardware.consumerir.xml
endif endif
# DebugFS
PRODUCT_SET_DEBUGFS_RESTRICTIONS := true
# Display # Display
PRODUCT_PACKAGES += \ PRODUCT_PACKAGES += \
android.frameworks.displayservice@1.0 \ android.frameworks.displayservice@1.0 \