tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allow app_zygote to map memfd backed memeory as PROT_EXEC" am: c01d3fb36c am: 6c61a71e33 am: 67c9ae04ba

Browse source 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2623093

Change-Id: Icf8b2ce1f59d6624f1c85aa7ad429d9ee82d72c3
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Dimitry Ivanov 2023-06-15 11:43:40 +00:00 committed by Automerger Merge Worker
commit 38986ba77c
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
private/app_zygote.te
View file

@ -20,6 +20,9 @@ allow app_zygote isolated_app:process dyntransition;
# For JIT
allow app_zygote self:process execmem;
# Allow exec mapping from tmpfs (memfds) for binary translation
allow app_zygote app_zygote_tmpfs:file execute;
# Allow app_zygote to stat the files that it opens. It must
# be able to inspect them so that it can reopen them on fork
# if necessary: b/30963384.