tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Allow vendor_init to write to misc_block_device am: db465285cf

Browse source 
am: 4af9448a1d

Change-Id: I1f178435ae86b871b29e9cfa3c3547b28c72b5be
This commit is contained in:
Tom Cherry 2018-04-13 10:24:34 -07:00 committed by android-build-merger
commit 5d8aba8b33
2 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
public/domain.te
View file

@ -600,6 +600,7 @@ neverallow {
-init
-uncrypt
-update_engine
-vendor_init
-vold
-recovery
-ueventd

3
public/vendor_init.te
View file

@ -146,6 +146,9 @@ allow vendor_init serialno_prop:file { getattr open read };
# Vendor init can perform operations on trusted and security Extended Attributes
allow vendor_init self:global_capability_class_set sys_admin;
# Raw writes to misc block device
allow vendor_init misc_block_device:blk_file w_file_perms;
not_compatible_property(`
set_prop(vendor_init, {
property_type