tequilaOS/platform_build
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

am 8dea5006: am 357842b1: Merge "Revert "Allow all domains access to /dev/qemu_trace.""

Browse source 
* commit '8dea5006c53e105f5a7181e5d915d88462de69ae':
  Revert "Allow all domains access to /dev/qemu_trace."
This commit is contained in:
dcashman 2014-06-16 18:03:01 +00:00 committed by Android Git Automerger
commit f1d5f8805c
21 changed files with 28 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
target/board/generic/BoardConfig.mk
View file

@ -77,13 +77,17 @@ TARGET_USERIMAGES_SPARSE_EXT_DISABLED := true
BOARD_SEPOLICY_DIRS += build/target/board/generic/sepolicy
BOARD_SEPOLICY_UNION += \
adbd.te \
app.te \
bootanim.te \
device.te \
domain.te \
file.te \
file_contexts \
mediaserver.te \
qemud.te \
rild.te \
shell.te \
surfaceflinger.te \
system_server.te
system_server.te \
zygote.te

1
target/board/generic/sepolicy/adbd.te Normal file
View file

@ -0,0 +1 @@
allow adbd qemu_device:chr_file rw_file_perms;

1
target/board/generic/sepolicy/app.te Normal file
View file

@ -0,0 +1 @@
allow appdomain qemu_device:chr_file rw_file_perms;

1
target/board/generic/sepolicy/bootanim.te
View file

@ -1,2 +1,3 @@
allow bootanim self:process execmem;
allow bootanim ashmem_device:chr_file execute;
allow bootanim qemu_device:chr_file rw_file_perms;

1
target/board/generic/sepolicy/domain.te
View file

@ -1,3 +1,2 @@
# For /sys/qemu_trace files in the emulator.
allow domain sysfs_writable:file rw_file_perms;
allow domain qemu_device:chr_file rw_file_perms;

1
target/board/generic/sepolicy/mediaserver.te Normal file
View file

@ -0,0 +1 @@
allow mediaserver qemu_device:chr_file rw_file_perms;

1
target/board/generic/sepolicy/rild.te
View file

@ -1 +1,2 @@
allow rild qemu_device:chr_file rw_file_perms;
unix_socket_connect(rild, qemud, qemud)

1
target/board/generic/sepolicy/surfaceflinger.te
View file

@ -1,2 +1,3 @@
allow surfaceflinger self:process execmem;
allow surfaceflinger ashmem_device:chr_file execute;
allow surfaceflinger qemu_device:chr_file rw_file_perms;

1
target/board/generic/sepolicy/system_server.te
View file

@ -1 +1,2 @@
unix_socket_connect(system_server, qemud, qemud)
allow system_server qemu_device:chr_file rw_file_perms;

1
target/board/generic/sepolicy/zygote.te Normal file
View file

@ -0,0 +1 @@
allow zygote qemu_device:chr_file rw_file_perms;

2
target/board/generic_mips/BoardConfig.mk
View file

@ -59,11 +59,13 @@ TARGET_USERIMAGES_SPARSE_EXT_DISABLED := true
BOARD_SEPOLICY_DIRS += build/target/board/generic/sepolicy
BOARD_SEPOLICY_UNION += \
adbd.te \
bootanim.te \
device.te \
domain.te \
file.te \
file_contexts \
mediaserver.te \
qemud.te \
rild.te \
shell.te \

6
target/board/generic_x86/BoardConfig.mk
View file

@ -44,6 +44,8 @@ TARGET_USERIMAGES_SPARSE_EXT_DISABLED := true
BOARD_SEPOLICY_DIRS += build/target/board/generic_x86/sepolicy
BOARD_SEPOLICY_UNION += \
app.te \
adbd.te \
bootanim.te \
device.te \
domain.te \
@ -51,8 +53,10 @@ BOARD_SEPOLICY_UNION += \
file_contexts \
healthd.te \
installd.te \
mediaserver.te \
qemud.te \
rild.te \
shell.te \
surfaceflinger.te \
system_server.te
system_server.te \
zygote.te

1
target/board/generic_x86/sepolicy/adbd.te Normal file
View file

@ -0,0 +1 @@
allow adbd qemu_device:chr_file rw_file_perms;

1
target/board/generic_x86/sepolicy/app.te Normal file
View file

@ -0,0 +1 @@
allow appdomain qemu_device:chr_file rw_file_perms;

1
target/board/generic_x86/sepolicy/bootanim.te Normal file
View file

@ -0,0 +1 @@
allow bootanim qemu_device:chr_file rw_file_perms;

1
target/board/generic_x86/sepolicy/domain.te
View file

@ -1,4 +1,3 @@
# For /sys/qemu_trace files in the emulator.
allow domain sysfs_writable:file rw_file_perms;
allow domain cpuctl_device:dir search;
allow domain qemu_device:chr_file rw_file_perms;

1
target/board/generic_x86/sepolicy/mediaserver.te Normal file
View file

@ -0,0 +1 @@
allow mediaserver qemu_device:chr_file rw_file_perms;

1
target/board/generic_x86/sepolicy/rild.te
View file

@ -1 +1,2 @@
allow rild qemu_device:chr_file rw_file_perms;
unix_socket_connect(rild, qemud, qemud)

1
target/board/generic_x86/sepolicy/surfaceflinger.te Normal file
View file

@ -0,0 +1 @@
allow surfaceflinger qemu_device:chr_file rw_file_perms;

1
target/board/generic_x86/sepolicy/system_server.te
View file

@ -1,2 +1,3 @@
allow system_server self:process execmem;
unix_socket_connect(system_server, qemud, qemud)
allow system_server qemu_device:chr_file rw_file_perms;

1
target/board/generic_x86/sepolicy/zygote.te
View file

@ -1,2 +1,3 @@
allow zygote self:process execmem;
allow zygote self:capability sys_nice;
allow zygote qemu_device:chr_file rw_file_perms;