tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
platform_system_sepolicy/apex/com.android.art-file_contexts

11 lines
419 B
Text
Raw Normal View History

Move file_contexts for APEXes to under /system/sepolicy For centralized development of sepolices, file_contexts files for APEXes are all moved to under /system/seplicy. Bug: 119034475 Bug: 113373927 Test: m apex.test com.android.tzdata com.android.runtime com.android.media Change-Id: I9bf4874793db4dbdb75cbd759ae95f72d7281007
2018-11-09 22:51:49 +01:00
#############################
# System files
#
(/.*)? u:object_r:system_file:s0
Add SELinux properties for artd Test: boot device and check for artd process Change-Id: I2a161701102ecbde3e293af0346d1db0b11d4aab
2021-03-03 21:30:28 +01:00
/bin/artd u:object_r:artd_exec:s0
Control use of dex2oat64 by device property Gate use of dex2oat64 by a device property. Bug: 153380900 Test: atest -c installd_dexopt_test Change-Id: I640085b5cd744cdc4563f565f8a914f9b1adc3ab
2020-04-16 07:11:24 +02:00
/bin/dex2oat(32|64)? u:object_r:dex2oat_exec:s0
Add `file_contexts` for Release Runtime APEX module. Also rename `file_contexts` for the "Debug" Runtime APEX module (containing both release and debug variants, as well as additional tools). Test: make com.android.runtime Test: make com.android.runtime.release Test: make com.android.runtime.debug Test: art/build/apex/runtests.sh Bug: 113373927 Change-Id: I6b917d7f5b1734aeb717932081c7b03366ef2774
2018-11-14 18:53:27 +01:00
/bin/dexoptanalyzer u:object_r:dexoptanalyzer_exec:s0
Permissions for odrefresh and /data/misc/apexdata/com.android.art odrefresh is the process responsible for checking and creating ART compilation artifacts that live in the ART APEX data directory (/data/misc/apexdata/com.android.art). There are two types of change here: 1) enabling odrefresh to run dex2oat and write updated boot class path and system server AOT artifacts into the ART APEX data directory. 2) enabling the zygote and assorted diagnostic tools to use the updated AOT artifacts. odrefresh uses two file contexts: apex_art_data_file and apex_art_staging_data_file. When odrefresh invokes dex2oat, the generated files have the apex_art_staging_data_file label (which allows writing). odrefresh then moves these files from the staging area to their installation area and gives them the apex_art_data_file label. Bug: 160683548 Test: adb root && adb shell /apex/com.android.art/bin/odrefresh Change-Id: I9fa290e0c9c1b7b82be4dacb9f2f8cb8c11e4895
2020-10-16 16:29:55 +02:00
/bin/odrefresh u:object_r:odrefresh_exec:s0
Add `file_contexts` for Release Runtime APEX module. Also rename `file_contexts` for the "Debug" Runtime APEX module (containing both release and debug variants, as well as additional tools). Test: make com.android.runtime Test: make com.android.runtime.release Test: make com.android.runtime.debug Test: art/build/apex/runtests.sh Bug: 113373927 Change-Id: I6b917d7f5b1734aeb717932081c7b03366ef2774
2018-11-14 18:53:27 +01:00
/bin/profman u:object_r:profman_exec:s0
Move file_contexts for APEXes to under /system/sepolicy For centralized development of sepolices, file_contexts files for APEXes are all moved to under /system/seplicy. Bug: 119034475 Bug: 113373927 Test: m apex.test com.android.tzdata com.android.runtime com.android.media Change-Id: I9bf4874793db4dbdb75cbd759ae95f72d7281007
2018-11-09 22:51:49 +01:00
/lib(64)?(/.*)? u:object_r:system_lib_file:s0
Reference in a new issue Copy permalink