StrixOS/vendor_strix
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

vendor: Update SELinux policy for sysinit

Browse Source 
Change-Id: I41d4c25d9d6246cd2ca0a8ff3b5a4e114e3bc4d4
This commit is contained in:
myfluxi
2014-11-22 19:33:26 +01:00
parent b920c072ef
commit 12daaee8a5
3 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
sepolicy/file_contexts
View File

@@ -4,6 +4,8 @@
/system/bin/auditd u:object_r:logd_exec:s0
/data/misc/audit(/.*)? u:object_r:auditd_log:s0
/system/bin/sysinit u:object_r:sysinit_exec:s0
#############################
# performance-related sysfs files (CM)
/sys/kernel/mm/ksm(/.*)? -- u:object_r:sysfs_writable:s0

1
sepolicy/sepolicy.mk
View File

@@ -15,6 +15,7 @@ BOARD_SEPOLICY_UNION += \
auditd.te \
installd.te \
netd.te \
sysinit.te \
system.te \
ueventd.te \
vold.te \

11
sepolicy/sysinit.te Normal file
View File

@@ -0,0 +1,11 @@
type sysinit, domain;
type sysinit_exec, exec_type, file_type;
init_daemon_domain(sysinit)
#============= sysinit ==============
allow sysinit devpts:chr_file { rw_file_perms };
allow sysinit shell_exec:file { rx_file_perms };
allow sysinit system_file:file { rx_file_perms };
allow sysinit self:process setcurrent;