p96705831
/
platform_build
forked from openkylin/platform_build
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Merge "sepolicy: Fix 'avc denied' issues for the emulators"

This commit is contained in:
Nick Kralevich 2015-12-12 01:07:07 +00:00 committed by Gerrit Code Review
parent 6674573897 36a76ec098
commit 154657f0e3
3 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
target/board/generic/sepolicy/domain.te
View File

@ -1,3 +1,5 @@
# For /sys/qemu_trace files in the emulator. # For /sys/qemu_trace files in the emulator.
allow domain sysfs_writable:file rw_file_perms; allow domain sysfs_writable:file rw_file_perms;
allow domain qemu_device:chr_file rw_file_perms; allow domain qemu_device:chr_file rw_file_perms;
get_prop(domain, qemu_prop)

2
target/board/generic/sepolicy/goldfish_setup.te
View File

@ -13,6 +13,8 @@ allow goldfish_setup toolbox_exec:file rx_file_perms;
allow goldfish_setup self:capability { net_admin net_raw }; allow goldfish_setup self:capability { net_admin net_raw };
allow goldfish_setup self:udp_socket create_socket_perms; allow goldfish_setup self:udp_socket create_socket_perms;
net_domain(goldfish_setup)
# Set net.eth0.dns*, debug.sf.nobootanimation # Set net.eth0.dns*, debug.sf.nobootanimation
set_prop(goldfish_setup, system_prop) set_prop(goldfish_setup, system_prop)
set_prop(goldfish_setup, debug_prop) set_prop(goldfish_setup, debug_prop)

1
target/board/generic/sepolicy/netd.te Normal file
View File

@ -0,0 +1 @@
dontaudit netd self:capability sys_module;