PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "storaged: add permissions for dumpstate"

Browse Source 
am: 611202ef53

Change-Id: If107d1d43e9247be68065d711f471e538830ee18
This commit is contained in:
William Roberts 2017-05-09 15:33:56 +00:00 committed by android-build-merger
commit 702605c62f
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
private/storaged.te
View File

@ -35,6 +35,9 @@ binder_call(storaged, system_server)
allow storaged batteryproperties_service:service_manager find;
binder_call(storaged, healthd)
# Implements a dumpsys interface.
allow storaged dumpstate:fd use;
# Kernel does extra check on CAP_DAC_OVERRIDE for libbinder when storaged is
# running as root. See b/35323867 #3.
dontaudit storaged self:capability dac_override;