Merge "Allow microdroid_manager to do stdio_to_kmsg" am: 069b9502b1
Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2300540 Change-Id: I9d366d7e6b9ca87d817819394fd48225416bd650 Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
commit
80e6a481d8
1 changed files with 3 additions and 0 deletions
|
@ -111,6 +111,9 @@ allow microdroid_manager serial_device:chr_file w_file_perms;
|
|||
# Allow microdroid_manager to handle extra_apks
|
||||
allow microdroid_manager extra_apk_file:dir create_dir_perms;
|
||||
|
||||
# Allow microdroid_manager to write kmsg_debug (stdio_to_kmsg).
|
||||
allow microdroid_manager kmsg_debug_device:chr_file w_file_perms;
|
||||
|
||||
# Domains other than microdroid can't write extra_apks
|
||||
neverallow { domain -microdroid_manager -init -vendor_init } extra_apk_file:file no_w_file_perms;
|
||||
neverallow { domain -microdroid_manager -init -vendor_init } extra_apk_file:dir no_w_dir_perms;
|
||||
|
|
Loading…
Reference in a new issue