StrixOS/build
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Move goldfish-specific policy rules to their own directory.

Browse Source 
Change-Id: I1bdd80f641db05fef4714654515c1e1fbb259794
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
This commit is contained in:
Stephen Smalley
2013-11-05 09:37:41 -05:00
parent a7f254feb7
commit 1d5352eaa3
3 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
target/board/generic/BoardConfig.mk
View File

@@ -52,3 +52,6 @@ BOARD_CACHEIMAGE_PARTITION_SIZE := 69206016
BOARD_CACHEIMAGE_FILE_SYSTEM_TYPE := ext4
BOARD_FLASH_BLOCK_SIZE := 512
TARGET_USERIMAGES_SPARSE_EXT_DISABLED := true
BOARD_SEPOLICY_DIRS += build/target/board/generic/sepolicy
BOARD_SEPOLICY_UNION += domain.te surfaceflinger.te

2
target/board/generic/sepolicy/domain.te Normal file
View File

@@ -0,0 +1,2 @@
# For /sys/qemu_trace files in the emulator.
allow domain sysfs_writable:file rw_file_perms;

1
target/board/generic/sepolicy/surfaceflinger.te Normal file
View File

@@ -0,0 +1 @@
allow surfaceflinger self:process execmem;