tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allow vendor_init to write to misc_block_device" into pi-dev

Browse source
This commit is contained in:
TreeHugger Robot 2018-04-16 22:01:16 +00:00 committed by Android (Google) Code Review
commit 6991a930e1
2 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
public/domain.te
View file

@ -600,6 +600,7 @@ neverallow {
-init
-uncrypt
-update_engine
-vendor_init
-vold
-recovery
-ueventd

3
public/vendor_init.te
View file

@ -146,6 +146,9 @@ allow vendor_init serialno_prop:file { getattr open read };
# Vendor init can perform operations on trusted and security Extended Attributes
allow vendor_init self:global_capability_class_set sys_admin;
# Raw writes to misc block device
allow vendor_init misc_block_device:blk_file w_file_perms;
not_compatible_property(`
set_prop(vendor_init, {
property_type