tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Allow dumpstate to create tmpfs files

Browse source 
dumpstate needs to be able to create tmpfs files for it's upcoming use
of memfd_create.

Test: Generate bugreport
Change-Id: I4ce19635d9b76929b05d85bdba89340e5d5399d1
This commit is contained in:
Chris Morin 2022-02-12 13:52:39 -08:00
parent 14db21eafa
commit 1d88bf547e
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
private/dumpstate.te
View file

@ -6,6 +6,10 @@ init_daemon_domain(dumpstate)
# Execute and transition to the vdc domain
domain_auto_trans(dumpstate, vdc_exec, vdc)
# Create tmpfs files for using memfd descriptors to get output from child
# processes.
tmpfs_domain(dumpstate)
# Acquire advisory lock on /system/etc/xtables.lock from ip[6]tables
allow dumpstate system_file:file lock;