tequilaOS/platform_device_qcom_sepolicy_vndr-legacy-um
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add sepolices to update engine domain.

Browse source 
While applying OTA update package, update engine
loops through partitions entries/mountpoints.
Add few policies and supress the dac ones.

Change-Id: Ic4ff7e8df86a01a3b7380e0bd458909f9099953e
This commit is contained in:
P.Adarsh Reddy 2020-03-27 14:57:29 +05:30 committed by Gerrit - the friendly Code Review server
parent ca55005ddb
commit 77fc2c2377
3 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
generic/vendor/common/update_engine_common.te vendored
View file

@ -38,4 +38,8 @@ allow update_engine_common {
allow update_engine_common tmpfs:lnk_file r_file_perms;
allow update_engine_common metadata_file:dir search;
allow update_engine_common {adsprpcd_file firmware_file}:dir search;
allow update_engine_common {bt_firmware_file firmware_file}:filesystem getattr;
dontaudit update_engine_common self:capability {dac_read_search dac_override};

4
legacy/vendor/sdm710/update_engine_common.te vendored
View file

@ -41,3 +41,7 @@ allow update_engine_common {
allow update_engine_common tmpfs:lnk_file r_file_perms;
allow update_engine_common metadata_file:dir search;
allow update_engine_common {adsprpcd_file firmware_file}:dir search;
allow update_engine_common {bt_firmware_file firmware_file}:filesystem getattr;
dontaudit update_engine_common self:capability {dac_read_search dac_override};

4
legacy/vendor/sdm845/update_engine_common.te vendored
View file

@ -38,3 +38,7 @@ allow update_engine_common {
allow update_engine_common tmpfs:lnk_file r_file_perms;
allow update_engine_common metadata_file:dir search;
allow update_engine_common {adsprpcd_file firmware_file}:dir search;
allow update_engine_common {bt_firmware_file firmware_file}:filesystem getattr;
dontaudit update_engine_common self:capability {dac_read_search dac_override};