* commit 'c0f0e8cab7268d372b5bded8b141133c2257f964': Allow qemu_device read-write access to various processes
This commit is contained in:
commit
d9f11a3f2b
10 changed files with 14 additions and 1 deletions
|
@ -78,6 +78,7 @@ TARGET_USERIMAGES_SPARSE_EXT_DISABLED := true
|
|||
BOARD_SEPOLICY_DIRS += build/target/board/generic/sepolicy
|
||||
BOARD_SEPOLICY_UNION += \
|
||||
adbd.te \
|
||||
app.te \
|
||||
bootanim.te \
|
||||
device.te \
|
||||
domain.te \
|
||||
|
@ -88,4 +89,5 @@ BOARD_SEPOLICY_UNION += \
|
|||
rild.te \
|
||||
shell.te \
|
||||
surfaceflinger.te \
|
||||
system_server.te
|
||||
system_server.te \
|
||||
zygote.te
|
||||
|
|
1
target/board/generic/sepolicy/app.te
Normal file
1
target/board/generic/sepolicy/app.te
Normal file
|
@ -0,0 +1 @@
|
|||
allow appdomain qemu_device:chr_file rw_file_perms;
|
|
@ -1,2 +1,3 @@
|
|||
allow bootanim self:process execmem;
|
||||
allow bootanim ashmem_device:chr_file execute;
|
||||
allow bootanim qemu_device:chr_file rw_file_perms;
|
||||
|
|
|
@ -1,2 +1,3 @@
|
|||
allow surfaceflinger self:process execmem;
|
||||
allow surfaceflinger ashmem_device:chr_file execute;
|
||||
allow surfaceflinger qemu_device:chr_file rw_file_perms;
|
||||
|
|
1
target/board/generic/sepolicy/zygote.te
Normal file
1
target/board/generic/sepolicy/zygote.te
Normal file
|
@ -0,0 +1 @@
|
|||
allow zygote qemu_device:chr_file rw_file_perms;
|
|
@ -44,7 +44,9 @@ TARGET_USERIMAGES_SPARSE_EXT_DISABLED := true
|
|||
|
||||
BOARD_SEPOLICY_DIRS += build/target/board/generic_x86/sepolicy
|
||||
BOARD_SEPOLICY_UNION += \
|
||||
app.te \
|
||||
adbd.te \
|
||||
bootanim.te \
|
||||
device.te \
|
||||
domain.te \
|
||||
file.te \
|
||||
|
@ -55,5 +57,6 @@ BOARD_SEPOLICY_UNION += \
|
|||
qemud.te \
|
||||
rild.te \
|
||||
shell.te \
|
||||
surfaceflinger.te \
|
||||
system_server.te \
|
||||
zygote.te
|
||||
|
|
1
target/board/generic_x86/sepolicy/app.te
Normal file
1
target/board/generic_x86/sepolicy/app.te
Normal file
|
@ -0,0 +1 @@
|
|||
allow appdomain qemu_device:chr_file rw_file_perms;
|
1
target/board/generic_x86/sepolicy/bootanim.te
Normal file
1
target/board/generic_x86/sepolicy/bootanim.te
Normal file
|
@ -0,0 +1 @@
|
|||
allow bootanim qemu_device:chr_file rw_file_perms;
|
1
target/board/generic_x86/sepolicy/surfaceflinger.te
Normal file
1
target/board/generic_x86/sepolicy/surfaceflinger.te
Normal file
|
@ -0,0 +1 @@
|
|||
allow surfaceflinger qemu_device:chr_file rw_file_perms;
|
|
@ -1,2 +1,3 @@
|
|||
allow zygote self:process execmem;
|
||||
allow zygote self:capability sys_nice;
|
||||
allow zygote qemu_device:chr_file rw_file_perms;
|
||||
|
|
Loading…
Reference in a new issue