StrixOS/build
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow execmem and ashmem_device execute as required.

Browse Source 
bootanim requires execmem.
bootanim and surfaceflinger requires execute to ashmem_device.

Change-Id: I3b4964c5acd31a44ce81672077c70353a375c072
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
This commit is contained in:
Stephen Smalley
2013-12-24 11:34:28 -05:00
parent b8559790d4
commit 61c7107df3
3 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
target/board/generic/BoardConfig.mk
View File

@@ -76,4 +76,7 @@ BOARD_FLASH_BLOCK_SIZE := 512
TARGET_USERIMAGES_SPARSE_EXT_DISABLED := true
BOARD_SEPOLICY_DIRS += build/target/board/generic/sepolicy
BOARD_SEPOLICY_UNION += domain.te surfaceflinger.te
BOARD_SEPOLICY_UNION += \
bootanim.te \
domain.te \
surfaceflinger.te

2
target/board/generic/sepolicy/bootanim.te Normal file
View File

@@ -0,0 +1,2 @@
allow bootanim self:process execmem;
allow bootanim ashmem_device:chr_file execute;

1
target/board/generic/sepolicy/surfaceflinger.te
View File

@@ -1 +1,2 @@
allow surfaceflinger self:process execmem;
allow surfaceflinger ashmem_device:chr_file execute;