tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allow shell read access to cgroup state" into main am: 77a8ac9ab4

Browse source 
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/3044973

Change-Id: Iefb2518fb39c0cf0b67ca73c6f81ff1905b2323a
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Treehugger Robot 2024-04-30 21:15:58 +00:00 committed by Automerger Merge Worker
commit 7e4f16b0f7
5 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
private/compat/202404/202404.ignore.cil
View file

@ -10,4 +10,5 @@
fs_bpf_lmkd_memevents_prog
binderfs_logs_transactions
proc_compaction_proactiveness
proc_cgroups
))

1
private/compat/34.0/34.0.ignore.cil
View file

@ -50,4 +50,5 @@
aconfigd_exec
aconfigd_socket
enable_16k_pages_prop
proc_cgroups
))

1
private/genfs_contexts
View file

@ -5,6 +5,7 @@ genfscon proc / u:object_r:proc:s0
genfscon proc /asound u:object_r:proc_asound:s0
genfscon proc /bootconfig u:object_r:proc_bootconfig:s0
genfscon proc /buddyinfo u:object_r:proc_buddyinfo:s0
genfscon proc /cgroups u:object_r:proc_cgroups:s0
genfscon proc /cmdline u:object_r:proc_cmdline:s0
genfscon proc /config.gz u:object_r:config_gz:s0
genfscon proc /cpu/alignment u:object_r:proc_cpu_alignment:s0

1
private/shell.te
View file

@ -372,6 +372,7 @@ r_dir_file(shell, proc_net_type)
allow shell {
proc_asound
proc_cgroups
proc_filesystems
proc_interrupts
proc_loadavg # b/124024827

3
public/file.te
View file

@ -38,6 +38,9 @@ type proc_asound, fs_type, proc_type;
type proc_bootconfig, fs_type, proc_type;
type proc_bpf, fs_type, proc_type;
type proc_buddyinfo, fs_type, proc_type;
starting_at_board_api(202504, `
type proc_cgroups, fs_type, proc_type;
')
type proc_cmdline, fs_type, proc_type;
type proc_cpu_alignment, fs_type, proc_type;
type proc_cpuinfo, fs_type, proc_type;