tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allow apkdmverity/zipfuse to write to kmsg_debug"

Browse source
This commit is contained in:
Treehugger Robot 2022-11-22 03:00:37 +00:00 committed by Gerrit Code Review
commit 5a28628dbe
2 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
microdroid/system/private/apkdmverity.te
View file

@ -32,6 +32,9 @@ allowxperm apkdmverity loop_device:blk_file ioctl {
# allow apkdmverity to log to the kernel
allow apkdmverity kmsg_device:chr_file w_file_perms;
# allow apkdmverity to write kmsg_debug (stdio_to_kmsg) inherited from microdroid_manager.
allow apkdmverity kmsg_debug_device:chr_file w_file_perms;
# apkdmverity is forked from microdroid_manager
allow apkdmverity microdroid_manager:fd use;

3
microdroid/system/private/zipfuse.te
View file

@ -36,6 +36,9 @@ allow system_file zipfusefs:filesystem associate;
# allow zipfuse to log to the kernel
allow zipfuse kmsg_device:chr_file w_file_perms;
# allow zipfuse to write kmsg_debug (stdio_to_kmsg) inherited from microdroid_manager.
allow zipfuse kmsg_debug_device:chr_file w_file_perms;
# allow zipfuse to handle extra apks
r_dir_file(zipfuse, extra_apk_file)
allow zipfuse extra_apk_file:dir mounton;