PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Revert^2 "Introduce derive_classpath."

Browse Source 
5fd85de907

Bug: 180105615
Test: manual boot of cuttlefish and gphone emulator
Change-Id: I9e43268d3b745e65b5ccc0a4896a7e55a253659d
This commit is contained in:
satayev 2021-03-19 11:08:49 +00:00 committed by Artur Satayev
parent 0b47552028
commit afc9791f21
4 changed files with 19 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
apex/com.android.sdkext-file_contexts
View File

@ -1,2 +1,3 @@
(/.*)? u:object_r:system_file:s0
/bin/derive_sdk u:object_r:derive_sdk_exec:s0
(/.*)? u:object_r:system_file:s0
/bin/derive_classpath u:object_r:derive_classpath_exec:s0
/bin/derive_sdk u:object_r:derive_sdk_exec:s0

12
private/derive_classpath.te Normal file
View File

@ -0,0 +1,12 @@
# Domain for derive_classpath
type derive_classpath, domain, coredomain;
type derive_classpath_exec, system_file_type, exec_type, file_type;
init_daemon_domain(derive_classpath)
# Create /data/system/environ/classpath file
allow derive_classpath environ_system_data_file:dir rw_dir_perms;
allow derive_classpath environ_system_data_file:file create_file_perms;
# b/183079517 fails on gphone targets otherwise
allow derive_classpath unlabeled:dir search;

3
private/file.te
View File

@ -53,3 +53,6 @@ type font_data_file, file_type, data_file_type, core_data_file_type;
# /data/misc/odsign
type odsign_data_file, file_type, data_file_type, core_data_file_type;
# /data/system/environ
type environ_system_data_file, file_type, data_file_type, core_data_file_type;

1
private/file_contexts
View File

@ -504,6 +504,7 @@
#
/data u:object_r:system_data_root_file:s0
/data/(.*)? u:object_r:system_data_file:s0
/data/system/environ(/.*)? u:object_r:environ_system_data_file:s0
/data/system/packages\.list u:object_r:packages_list_file:s0
/data/unencrypted(/.*)? u:object_r:unencrypted_data_file:s0
/data/backup(/.*)? u:object_r:backup_data_file:s0