PWN-Hunter/android_system_sepolicy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "document the non-ART-related reasons for execmem"

Browse Source
This commit is contained in:
Nick Kralevich 2015-09-16 23:16:37 +00:00 committed by Gerrit Code Review
commit eb8b2188e8
2 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
app.te
View File

@ -7,8 +7,9 @@
### zygote spawned apps should be added here.
###
# Dalvik Compiler JIT Mapping.
# WebView and other application-specific JIT compilers
allow appdomain self:process execmem;
allow appdomain ashmem_device:chr_file execute;
# Receive and use open file descriptors inherited from zygote.

2
mediaserver.te
View File

@ -14,7 +14,9 @@ binder_call(mediaserver, binderservicedomain)
binder_call(mediaserver, appdomain)
binder_service(mediaserver)
# Required by Widevine DRM (b/22990512)
allow mediaserver self:process execmem;
allow mediaserver kernel:system module_request;
allow mediaserver media_data_file:dir create_dir_perms;
allow mediaserver media_data_file:file create_file_perms;