PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add Selinux rule to allow iorapd to execute compiler.

Browse Source 
Bug: 147320338
Test: Run the maintenance and check if the compiled is executed.
Change-Id: Idbd193483a106969a8a421150101efa00aee460d
This commit is contained in:
Yan Wang 2020-01-08 15:07:53 -08:00
parent 4f362b1c68
commit 7d844ee436
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
public/iorapd.te
View File

@ -36,6 +36,9 @@ allow iorapd self:global_capability_class_set sys_nice;
# tracing sessions and read trace data.
unix_socket_connect(iorapd, traced_consumer, traced)
# Allow iorapd to execute compilation (iorap.cmd.compiler) in idle time.
allow iorapd system_file:file execute_no_trans;
###
### neverallow rules
###