tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "use dalvik.vm.boot-dex2oat-threads inside microdroid"

Browse source
This commit is contained in:
Treehugger Robot 2022-01-18 13:40:30 +00:00 committed by Gerrit Code Review
commit 4da68c0fe4
4 changed files with 11 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
microdroid/system/private/compos.te
View file

@ -44,3 +44,6 @@ dontaudit compos self:global_capability_class_set dac_override;
# TODO(b/209008712): Remove dex2oat once the migration is done.
domain_auto_trans(compos, odrefresh_exec, odrefresh)
domain_auto_trans(compos, dex2oat_exec, dex2oat)
# Allow compos to set dalvik.vm.boot-dex2oat-threads
set_prop(compos, dalvik_config_prop)

7
microdroid/system/private/dex2oat.te
View file

@ -28,7 +28,10 @@ allow dex2oat system_file:file lock;
# Allow dex2oat to read /apex/apex-info-list.xml
allow dex2oat apex_info_file:file r_file_perms;
# dex2oat gets the concurrency level via this property which is set by compos
get_prop(dex2oat, dalvik_config_prop)
# Don't audit because we don't configure the compiler through system properties
# in the VM.
dontaudit dex2oat dalvik_config_prop:file { open read getattr map };
# in the VM except for dalvik.vm.boot-dex2oat-threads
dontaudit dex2oat dalvik_config_ignored_prop:file { open read getattr map };
dontaudit dex2oat device_config_runtime_native_prop:file { open read getattr map };

1
microdroid/system/private/property.te
View file

@ -1,4 +1,5 @@
# Declare ART properties for CompOS
system_public_prop(dalvik_config_ignored_prop)
system_public_prop(dalvik_config_prop)
system_restricted_prop(device_config_runtime_native_prop)

3
microdroid/system/private/property_contexts
View file

@ -163,7 +163,8 @@ ro.vndk.version u:object_r:build_prop:s0 exact string
heapprofd.enable u:object_r:heapprofd_prop:s0 exact bool
# ART properties for CompOS
dalvik.vm. u:object_r:dalvik_config_prop:s0 prefix
dalvik.vm. u:object_r:dalvik_config_ignored_prop:s0 prefix
persist.device_config.runtime_native. u:object_r:device_config_runtime_native_prop:s0 prefix
dalvik.vm.boot-dex2oat-threads u:object_r:dalvik_config_prop:s0 exact int
apexd.payload_metadata.path u:object_r:apexd_payload_metadata_prop:s0 exact string