tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Allow the kernel to read shell_data_file

Browse source 
In ApexTestCases, a temp file in /data/local/tmp is used via a loop
device, which requires the kernel to read it.

This is only allowed in userdebug/eng.

Bug: 192259606
Test: ApexTestCases
Change-Id: Ic7d3e67a8a3e818b43b7caead9053d82cbcbccf7
This commit is contained in:
Jooyung Han 2021-07-01 00:04:41 +09:00
parent 55badc22c1
commit 4b8ece3683
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
public/kernel.te
View file

@ -95,6 +95,11 @@ allow kernel {
staging_data_file staging_data_file
vendor_apex_file vendor_apex_file
}:file read; }:file read;
# Also allow the kernel to read /data/local/tmp files via loop device
# for ApexTestCases
userdebug_or_eng(`
allow kernel shell_data_file:file read;
')
# Allow the first-stage init (which is running in the kernel domain) to execute the # Allow the first-stage init (which is running in the kernel domain) to execute the
# dynamic linker when it re-executes /init to switch into the second stage. # dynamic linker when it re-executes /init to switch into the second stage.