StrixOS/vendor_strix
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

sepolicy: Fix a few denials

Browse Source 
* From sysinit and adbd

Change-Id: I56505e34774f9697a7f336efb43808a651a871f8
This commit is contained in:
Steve Kondik
2016-09-20 02:41:26 -07:00
parent bb358130b8
commit 0525ff2a9e
4 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
sepolicy/adbd.te Normal file
View File

@@ -0,0 +1 @@
set_prop(adbd, adbsecure_prop)

1
sepolicy/property.te
View File

@@ -1,3 +1,4 @@
type adbtcp_prop, property_type;
type recovery_prop, property_type;
type userinit_prop, property_type;
type adbsecure_prop, property_type;

2
sepolicy/property_contexts
View File

@@ -1,4 +1,4 @@
adb.network.port u:object_r:adbtcp_prop:s0
recovery.perf.mode u:object_r:recovery_prop:s0
adb.secure u:object_r:recovery_prop:s0
ro.adb.secure u:object_r:adbsecure_prop:s0
cm.userinit.active u:object_r:userinit_prop:s0

2
sepolicy/sysinit.te
View File

@@ -7,6 +7,8 @@ init_daemon_domain(sysinit)
allow sysinit devpts:chr_file { rw_file_perms };
allow sysinit shell_exec:file { rx_file_perms };
allow sysinit system_file:file { rx_file_perms };
allow sysinit system_file:dir { r_dir_perms };
allow sysinit toolbox_exec:file { rx_file_perms };
allow sysinit self:process setcurrent;
userdebug_or_eng(`