tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "crosvm doesn't need IPC_LOCK" into main

Browse source
This commit is contained in:
Alan Stokes 2024-01-29 09:19:43 +00:00 committed by Gerrit Code Review
commit 31b6d34f6b
1 changed files with 0 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
private/crosvm.te
View file

@ -45,9 +45,6 @@ allow crosvm {
# Allow searching the directory where the composite disk images are.
allow crosvm virtualizationservice_data_file:dir search;
# Allow crosvm to mlock guest memory.
allow crosvm self:capability ipc_lock;
# Let crosvm access its control socket as created by VS.
# read, write, getattr: listener socket polling
# accept: listener socket accepting new connection