tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Fix more long-tail denials."

Browse source
This commit is contained in:
Geremy Condra 2013-09-05 23:49:50 +00:00 committed by Gerrit Code Review
commit 21d13e9b66
3 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
isolated_app.te
View file

@ -21,3 +21,9 @@ r_dir_file(appdomain, isolated_app)
# Chrome works, may need to be updated as more apps using isolated services
# are examined.
allow isolated_app appdomain:unix_stream_socket { read write };
allow isolated_app dalvikcache_data_file:file execute;
allow isolated_app apk_data_file:dir getattr;
allow isolated_app init:unix_stream_socket { read write getattr getopt };
allow isolated_app init_tmpfs:file read;

1
kernel.te
View file

@ -6,3 +6,4 @@ unconfined_domain(kernel)
relabelto_domain(kernel)
allow kernel {fs_type dev_type file_type}:dir_file_class_set relabelto;
allow kernel unlabeled:filesystem mount;

5
system.te
View file

@ -14,5 +14,10 @@ allow system self:zygote { specifyids specifyrlimits specifyseinfo };
allow system backup_data_file:dir relabelto;
allow system cache_backup_file:dir relabelto;
allow system anr_data_file:dir relabelto;
allow system system_data_file:dir relabelto;
allow system apk_data_file:file relabelto;
allow system apk_tmp_file:file relabelto;
allow system cache_backup_file:file relabelto;
allow system apk_private_tmp_file:file relabelto;
allow system wallpaper_file:file relabelto;