PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow init to mkdir inside /data/gsi.

Browse Source 
Bug: 133435561
Test: adb shell gsi_tool install
Change-Id: Iaa610c72d8098e157bb89e321624369f86f4ea19
Merged-In: Iaa610c72d8098e157bb89e321624369f86f4ea19
This commit is contained in:
David Anderson 2019-05-23 13:44:22 -07:00
parent 4cd2db897d
commit 51fae66027
4 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
prebuilts/api/29.0/private/gsid.te
View File

@ -118,6 +118,7 @@ neverallow {
neverallow { neverallow {
domain domain
-gsid -gsid
-init
} gsi_data_file:dir ~{ open create read getattr setattr search relabelto ioctl }; } gsi_data_file:dir ~{ open create read getattr setattr search relabelto ioctl };
neverallow { neverallow {

1
prebuilts/api/29.0/public/init.te
View File

@ -167,7 +167,6 @@ allow init {
file_type file_type
-app_data_file -app_data_file
-exec_type -exec_type
-gsi_data_file
-iorapd_data_file -iorapd_data_file
-keystore_data_file -keystore_data_file
-misc_logd_file -misc_logd_file

1
private/gsid.te
View File

@ -118,6 +118,7 @@ neverallow {
neverallow { neverallow {
domain domain
-gsid -gsid
-init
} gsi_data_file:dir ~{ open create read getattr setattr search relabelto ioctl }; } gsi_data_file:dir ~{ open create read getattr setattr search relabelto ioctl };
neverallow { neverallow {

1
public/init.te
View File

@ -167,7 +167,6 @@ allow init {
file_type file_type
-app_data_file -app_data_file
-exec_type -exec_type
-gsi_data_file
-iorapd_data_file -iorapd_data_file
-keystore_data_file -keystore_data_file
-misc_logd_file -misc_logd_file