tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Allow system_server_startup to load system server odex files

Browse source 
(cherry picked from commit 7778e8cdb3)

Bug: 180949581
Test: atest odsign_e2e_tests
Ignore-AOSP-First: cherry-pick from aosp
Change-Id: Ia49118ffb771abb425e3d7ee2f50ada7524f735f
This commit is contained in:
Orion Hodson 2021-06-23 16:41:14 +01:00
parent 98f9af8bc1
commit 4d6e34c3f8
2 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
prebuilts/api/31.0/private/system_server_startup.te
View file

@ -7,6 +7,10 @@ tmpfs_domain(system_server_startup)
allow system_server_startup self:process execmem; allow system_server_startup self:process execmem;
allow system_server_startup system_server_startup_tmpfs:file { execute read write open map }; allow system_server_startup system_server_startup_tmpfs:file { execute read write open map };
# Allow to pick up integrity-checked artifacts from the ART APEX dalvik cache.
allow system_server_startup apex_art_data_file:dir r_dir_perms;
allow system_server_startup apex_art_data_file:file { r_file_perms execute };
# Allow system_server_startup to run setcon() and enter the # Allow system_server_startup to run setcon() and enter the
# system_server domain # system_server domain
allow system_server_startup self:process setcurrent; allow system_server_startup self:process setcurrent;

4
private/system_server_startup.te
View file

@ -7,6 +7,10 @@ tmpfs_domain(system_server_startup)
allow system_server_startup self:process execmem; allow system_server_startup self:process execmem;
allow system_server_startup system_server_startup_tmpfs:file { execute read write open map }; allow system_server_startup system_server_startup_tmpfs:file { execute read write open map };
# Allow to pick up integrity-checked artifacts from the ART APEX dalvik cache.
allow system_server_startup apex_art_data_file:dir r_dir_perms;
allow system_server_startup apex_art_data_file:file { r_file_perms execute };
# Allow system_server_startup to run setcon() and enter the # Allow system_server_startup to run setcon() and enter the
# system_server domain # system_server domain
allow system_server_startup self:process setcurrent; allow system_server_startup self:process setcurrent;