openkylin
/
platform_build
mirror of https://gitee.com/openkylin/platform_build.git
9
0
Fork 1
Code Issues Projects Releases Wiki Activity

Coalesce generic_x86 and generic sepolicy where possible. 

We originally forked a complete copy of generic/sepolicy into
generic_x86/sepolicy, but we can instead inherit from it and
merely add rules as needed under generic_x86/sepolicy.

Change-Id: I21e1a1425ce08676a8ea69685a4761db3bfde628
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
This commit is contained in:
Stephen Smalley 2014-06-16 12:36:49 -04:00
parent 78eee96a72
commit a49411f49b
9 changed files with 4 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
target/board/generic_x86/BoardConfig.mk
View File

@ -42,7 +42,10 @@ BOARD_CACHEIMAGE_FILE_SYSTEM_TYPE := ext4
BOARD_FLASH_BLOCK_SIZE := 512
TARGET_USERIMAGES_SPARSE_EXT_DISABLED := true
BOARD_SEPOLICY_DIRS += build/target/board/generic_x86/sepolicy
BOARD_SEPOLICY_DIRS += \
build/target/board/generic/sepolicy \
build/target/board/generic_x86/sepolicy
BOARD_SEPOLICY_UNION += \
device.te \
domain.te \

1
target/board/generic_x86/sepolicy/device.te
View File

@ -1 +0,0 @@
type qemu_device, dev_type;

3
target/board/generic_x86/sepolicy/domain.te
View File

@ -1,4 +1 @@
# For /sys/qemu_trace files in the emulator.
allow domain sysfs_writable:file rw_file_perms;
allow domain cpuctl_device:dir search;
allow domain qemu_device:chr_file rw_file_perms;

1
target/board/generic_x86/sepolicy/file.te
View File

@ -1 +0,0 @@
type qemud_socket, file_type;

4
target/board/generic_x86/sepolicy/file_contexts
View File

@ -1,4 +0,0 @@
/dev/qemu_.* u:object_r:qemu_device:s0
/dev/socket/qemud u:object_r:qemud_socket:s0
/system/bin/qemud u:object_r:qemud_exec:s0
/sys/qemu_trace(/.*)? -- u:object_r:sysfs_writable:s0

6
target/board/generic_x86/sepolicy/qemud.te
View File

@ -1,6 +0,0 @@
# qemu support daemon
type qemud, domain;
type qemud_exec, exec_type, file_type;
init_daemon_domain(qemud)
unconfined_domain(qemud)

1
target/board/generic_x86/sepolicy/rild.te
View File

@ -1 +0,0 @@
unix_socket_connect(rild, qemud, qemud)

1
target/board/generic_x86/sepolicy/shell.te
View File

@ -1 +0,0 @@
allow shell serial_device:chr_file rw_file_perms;

1
target/board/generic_x86/sepolicy/system_server.te
View File

@ -1,2 +1 @@
allow system_server self:process execmem;
unix_socket_connect(system_server, qemud, qemud)