tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
platform_system_sepolicy/private/file_contexts_asan

17 lines
1.1 KiB
Text
Raw Normal View History

Label /data/asan/* libs as system_lib_file. This patch gives global access to asan libraries. This is not ideal since the labeling is not symmetric with standard locations, but this approach is easy to maintain. Fixes: 117555408 Test: processes on asan builds load /data/asan/* libs correctly Change-Id: If54558c1808d8b16e06073c150c9f3eb358dda67
2018-10-10 20:10:25 +02:00
/data/asan/system/lib(/.*)? u:object_r:system_lib_file:s0
/data/asan/system/lib64(/.*)? u:object_r:system_lib_file:s0
/data/asan/vendor/lib(/.*)? u:object_r:system_lib_file:s0
/data/asan/vendor/lib64(/.*)? u:object_r:system_lib_file:s0
/data/asan/odm/lib(/.*)? u:object_r:system_lib_file:s0
/data/asan/odm/lib64(/.*)? u:object_r:system_lib_file:s0
fix data/asan/product/lib(64) can't access by platform_app issue FMRadio change from system image to product image, then FMRadio can't launch selinux denied log: avc: denied { open } for path="/data/asan/product/lib64/libfmjni.so" dev="mmcblk0p35" ino=18 scontext=u:r:platform_app:s0:c512,c768 tcontext=u:object_r:system_data_file:s0 tclass=file permissive=0 app=com.android.fmradio solution: label data/asan/product/lib(64) to system_lib_file Bug: 136974466 Test: launch FMRadio, it can work Change-Id: Icdfc794cb077b81d550816d2e7779c763604e050
2019-07-08 04:17:43 +02:00
/data/asan/product/lib(/.*)? u:object_r:system_lib_file:s0
/data/asan/product/lib64(/.*)? u:object_r:system_lib_file:s0
Allow app_process to link /data/asan/system_ext/lib/* app_process couldn't map /data/asan/system_ext/lib/libgpud_sys.so avc: denied { execute } for path="/data/asan/system_ext/lib/libgpud_sys.so" dev="dm-43" ino=784 scontext=u:r:zygote:s0 tcontext=u:object_r:system_data_file:s0 tclass=file permissive=0 Bug: 286479817 Test: bootup, app_process can work well with asan enabled. Change-Id: I577105fe1b0c4cb7fa98ccb33eac0f59a0e645f6
2023-06-08 13:14:50 +02:00
/data/asan/(system_ext|system/system_ext)/lib(/.*)? u:object_r:system_lib_file:s0
/data/asan/(system_ext|system/system_ext)/lib64(/.*)? u:object_r:system_lib_file:s0
asan: global read access to /system/asan.options Bug: 117178352 Test: no denials to /system/asan.options on asan walleye Change-Id: I6042693afb926a22a3e2be79bd2a7ba062806143
2018-10-07 01:16:46 +02:00
/system/asan.options u:object_r:system_asan_options_file:s0
Sepolicy: Add ASAN-Extract Add selinux policies for init script and shell script to unzip a tar containing ASAN libraries on boot. Bug: 36458146 Test: m && m SANITIZE_TARGET=address Test: manual (build steps for tar missing) Change-Id: I5c3cb233aae93ee9985431090af902b0e3c1b0a7 (cherry picked from commit 0b74305011e70bc58490720709e86aac6eb7700f) Merged-In: I5c3cb233aae93ee9985431090af902b0e3c1b0a7
2017-03-22 03:39:01 +01:00
/system/bin/asan_extract u:object_r:asan_extract_exec:s0
Sync internal master and AOSP sepolicy. Bug: 37916906 Test: Builds 'n' boots. Change-Id: Ia1d86264446ebecc1ca79f32f11354921bc77668 Merged-In: I208ec6a864127a059fb389417a9c6b259d7474cb
2017-09-26 21:58:29 +02:00
/system/bin/asanwrapper u:object_r:asanwrapper_exec:s0
/system/bin/asan/app_process u:object_r:zygote_exec:s0
/system/bin/asan/app_process32 u:object_r:zygote_exec:s0
/system/bin/asan/app_process64 u:object_r:zygote_exec:s0
Reference in a new issue Copy permalink