2014-01-10 00:25:36 +01:00
|
|
|
userdebug_or_eng(`
|
|
|
|
|
domain_auto_trans(shell, su_exec, su)
|
|
|
|
|
# Allow dumpstate to call su on userdebug / eng builds to collect
|
|
|
|
|
# additional information.
|
|
|
|
|
domain_auto_trans(dumpstate, su_exec, su)
|
2013-12-02 20:18:11 +01:00
|
|
|
|
2015-01-29 21:11:55 +01:00
|
|
|
# Make sure that dumpstate runs the same from the "su" domain as
|
|
|
|
|
# from the "init" domain.
|
|
|
|
|
domain_auto_trans(su, dumpstate_exec, dumpstate)
|
|
|
|
|
|
2016-10-12 23:58:09 +02:00
|
|
|
# su is also permissive to permit setenforce.
|
2014-01-10 00:25:36 +01:00
|
|
|
permissive su;
|
2014-05-02 23:50:26 +02:00
|
|
|
|
2016-10-12 23:58:09 +02:00
|
|
|
# app_domain fallout
|
|
|
|
|
tmpfs_domain(su)
|
|
|
|
|
# Map with PROT_EXEC.
|
|
|
|
|
allow su su_tmpfs:file execute;
|
2014-01-10 00:25:36 +01:00
|
|
|
')
|
