tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Allow dexoptanalyzer to use fd's from odsign.

Browse source 
odsign exec()'s odrefresh, which in turn exec()'s dexoptanalyzer.

Bug: 165630556
Test: No denials on boot
Change-Id: Ie97726cfbdbf09f75fa0b00d34ee10c9bdf5a5d7
This commit is contained in:
Martijn Coenen 2021-02-19 09:52:15 +01:00
parent e9d2671e10
commit 6badc7f4c8
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
private/dexoptanalyzer.te
View file

@ -29,6 +29,10 @@ allow dexoptanalyzer apex_art_data_file:file r_file_perms;
# Allow dexoptanalyzer to use file descriptors from odrefresh. # Allow dexoptanalyzer to use file descriptors from odrefresh.
allow dexoptanalyzer odrefresh:fd use; allow dexoptanalyzer odrefresh:fd use;
# Use devpts and fd from odsign (which exec()'s odrefresh)
allow dexoptanalyzer odsign:fd use;
allow dexoptanalyzer odsign_devpts:chr_file { read write };
allow dexoptanalyzer installd:fd use; allow dexoptanalyzer installd:fd use;
allow dexoptanalyzer installd:fifo_file { getattr write }; allow dexoptanalyzer installd:fifo_file { getattr write };