tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
platform_system_sepolicy/private/compat/28.0/28.0.compat.cil

6 lines
306 B
Text
Raw Normal View History

Add mechanism for granting permissions to old vendor images This addresses Treble backwards compat issues introduced in aosp/793958 and aosp/783669. Bug: 122874820 Test: build/flash blueline with pi-dev vendor and generic_ab system images. Test: adb pull /sys/fs/selinux/policy; sesearch policy --allowx -s vendordomain -t dev_type Change-Id: Ic2b304472bb88051e03740dc387834056aba641a
2019-05-02 22:48:44 +02:00
(typeattribute vendordomain)
(typeattributeset vendordomain ((and (domain) ((not (coredomain))))))
(allowx vendordomain dev_type (ioctl blk_file ((range 0x0000 0xffff))))
(allowx vendordomain file_type (ioctl file ((range 0x0000 0xffff))))
netlink_route_socket: add new nlmsg_readpriv perm Used when mapping RTM_GETLINK messages to this new permission. Users of netlink_route_sockets that do not use the net_domain() macro will need to grant this permission as needed. Compatibility with older vendor images is preserved by granting all vendor domains access to this new permission in *.compat.cil files. Bug: 141455849 Test: build (this change is a no-op without kernel changes) Change-Id: I18f1c9fc958120a26b7b3bea004920d848ffb26e
2019-10-16 15:19:40 +02:00
(allow vendordomain self (netlink_route_socket (nlmsg_readpriv)))
Reference in a new issue Copy permalink