PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "document the non-ART-related reasons for execmem"

Browse Source
This commit is contained in:
Nick Kralevich 2015-09-16 23:16:37 +00:00 committed by Gerrit Code Review
commit eb8b2188e8
2 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
app.te
View File

@ -7,8 +7,9 @@
### zygote spawned apps should be added here. ### zygote spawned apps should be added here.
### ###
# Dalvik Compiler JIT Mapping. # WebView and other application-specific JIT compilers
allow appdomain self:process execmem; allow appdomain self:process execmem;
allow appdomain ashmem_device:chr_file execute; allow appdomain ashmem_device:chr_file execute;
# Receive and use open file descriptors inherited from zygote. # Receive and use open file descriptors inherited from zygote.

2
mediaserver.te
View File

@ -14,7 +14,9 @@ binder_call(mediaserver, binderservicedomain)
binder_call(mediaserver, appdomain) binder_call(mediaserver, appdomain)
binder_service(mediaserver) binder_service(mediaserver)
# Required by Widevine DRM (b/22990512)
allow mediaserver self:process execmem; allow mediaserver self:process execmem;
allow mediaserver kernel:system module_request; allow mediaserver kernel:system module_request;
allow mediaserver media_data_file:dir create_dir_perms; allow mediaserver media_data_file:dir create_dir_perms;
allow mediaserver media_data_file:file create_file_perms; allow mediaserver media_data_file:file create_file_perms;