tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allow system server to record its own profile" into pi-dev

Browse source 
am: 7ea7f12d14

Change-Id: Ib34585d03d7c3a2389ab6cd0e533e31df068edad
This commit is contained in:
android-build-team Robot 2018-05-04 15:54:50 -07:00 committed by android-build-merger
commit 21a64f9b59
1 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
prebuilts/api/28.0/private/system_server.te
View file

@ -772,9 +772,14 @@ allow system_server netd:bpf map_read;
# Allow system_server to open profile snapshots for read.
# System server never reads the actual content. It passes the descriptor to
# to privileged apps which acquire the permissions to inspect the profiles.
allow system_server user_profile_data_file:dir { search };
allow system_server user_profile_data_file:dir { getattr search };
allow system_server user_profile_data_file:file { getattr open read };
# On userdebug build we may profile system server. Allow it to write and create its own profile.
userdebug_or_eng(`
allow system_server user_profile_data_file:file create_file_perms;
')
userdebug_or_eng(`
# Allow system server to notify mediaextractor of the plugin update.
allow system_server mediaextractor_update_service:service_manager find;