tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allow ueventd to access device-mapper."

Browse source
This commit is contained in:
David Anderson 2023-05-19 19:43:21 +00:00 committed by Gerrit Code Review
commit 73d18c2bfe
2 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
microdroid/system/private/ueventd.te
View file

@ -46,6 +46,10 @@ allow ueventd self:global_capability_class_set sys_module;
allow ueventd vendor_file:system module_load;
allow ueventd kernel:key search;
# Query device-mapper to extract name/uuid in response to uevents.
allow ueventd dm_device:chr_file rw_file_perms;
allow ueventd self:capability sys_admin;
# ueventd is using bootstrap bionic
use_bootstrap_libs(ueventd)

4
public/ueventd.te
View file

@ -65,6 +65,10 @@ use_bootstrap_libs(ueventd)
# Allow ueventd to run shell scripts from vendor
allow ueventd vendor_shell_exec:file execute;
# Query device-mapper to extract name/uuid in response to uevents.
allow ueventd dm_device:chr_file rw_file_perms;
allow ueventd self:capability sys_admin;
#####
##### neverallow rules
#####