StrixOS/build
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "sepolicy: Fix 'avc denied' issues for the emulators"

Browse Source
This commit is contained in:
Nick Kralevich
2015-12-12 01:07:07 +00:00
committed by Gerrit Code Review
parent 6674573897 36a76ec098
commit 154657f0e3
3 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
target/board/generic/sepolicy/domain.te
View File

@@ -1,3 +1,5 @@
# For /sys/qemu_trace files in the emulator. # For /sys/qemu_trace files in the emulator.
allow domain sysfs_writable:file rw_file_perms; allow domain sysfs_writable:file rw_file_perms;
allow domain qemu_device:chr_file rw_file_perms; allow domain qemu_device:chr_file rw_file_perms;
get_prop(domain, qemu_prop)

2
target/board/generic/sepolicy/goldfish_setup.te
View File

@@ -13,6 +13,8 @@ allow goldfish_setup toolbox_exec:file rx_file_perms;
allow goldfish_setup self:capability { net_admin net_raw }; allow goldfish_setup self:capability { net_admin net_raw };
allow goldfish_setup self:udp_socket create_socket_perms; allow goldfish_setup self:udp_socket create_socket_perms;
net_domain(goldfish_setup)
# Set net.eth0.dns*, debug.sf.nobootanimation # Set net.eth0.dns*, debug.sf.nobootanimation
set_prop(goldfish_setup, system_prop) set_prop(goldfish_setup, system_prop)
set_prop(goldfish_setup, debug_prop) set_prop(goldfish_setup, debug_prop)

1
target/board/generic/sepolicy/netd.te Normal file
View File

@@ -0,0 +1 @@
dontaudit netd self:capability sys_module;