StrixOS/build
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge "Add policy for x86 emulator."

Browse Source
This commit is contained in:
Nick Kralevich
2013-12-20 21:01:42 +00:00
committed by Gerrit Code Review
parent 3ccb437d93 737f9a167a
commit dfabbc6863
6 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
target/board/generic_x86/BoardConfig.mk
View File

@@ -41,3 +41,11 @@ BOARD_CACHEIMAGE_PARTITION_SIZE := 69206016
BOARD_CACHEIMAGE_FILE_SYSTEM_TYPE := ext4 BOARD_CACHEIMAGE_FILE_SYSTEM_TYPE := ext4
BOARD_FLASH_BLOCK_SIZE := 512 BOARD_FLASH_BLOCK_SIZE := 512
TARGET_USERIMAGES_SPARSE_EXT_DISABLED := true TARGET_USERIMAGES_SPARSE_EXT_DISABLED := true
BOARD_SEPOLICY_DIRS += build/target/board/generic_x86/sepolicy
BOARD_SEPOLICY_UNION += \
domain.te \
healthd.te \
installd.te \
system_server.te \
zygote.te

1
target/board/generic_x86/sepolicy/domain.te Normal file
View File

@@ -0,0 +1 @@
allow domain cpuctl_device:dir search;

1
target/board/generic_x86/sepolicy/healthd.te Normal file
View File

@@ -0,0 +1 @@
allow healthd self:capability sys_nice;

1
target/board/generic_x86/sepolicy/installd.te Normal file
View File

@@ -0,0 +1 @@
allow installd self:process execmem;

1
target/board/generic_x86/sepolicy/system_server.te Normal file
View File

@@ -0,0 +1 @@
allow system_server self:process execmem;

2
target/board/generic_x86/sepolicy/zygote.te Normal file
View File

@@ -0,0 +1,2 @@
allow zygote self:process execmem;
allow zygote self:capability sys_nice;