tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

adb: add adbd -> shell signal permissions.

Browse source 
adbd needs to kill spawned subprocesses if the client terminates
the connection. SIGHUP will be used for this purpose, which
requires the process:signal permission.

Bug: http://b/23825725
Change-Id: I36d19e14809350dd6791a8a44f01b2169effbfd4
This commit is contained in:
David Pursell 2015-09-14 17:29:37 -07:00
parent c37121436b
commit 05056457d4
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
adbd.te
View file

@ -9,8 +9,9 @@ userdebug_or_eng(`
domain_auto_trans(adbd, shell_exec, shell)
# Do not sanitize the environment or open fds of the shell.
allow adbd shell:process noatsecure;
# Do not sanitize the environment or open fds of the shell. Allow signaling
# created processes.
allow adbd shell:process { noatsecure signal };
# Set UID and GID to shell. Set supplementary groups.
allow adbd self:capability { setuid setgid };