Merge "Allow microdroid_manager to do stdio_to_kmsg" am: 069b9502b1

Original change: https://android-review.googlesource.com/c/platform/system/sepolicy/+/2300540

Change-Id: I9d366d7e6b9ca87d817819394fd48225416bd650
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Treehugger Robot 2022-11-14 14:20:46 +00:00 committed by Automerger Merge Worker
commit 80e6a481d8

View file

@ -111,6 +111,9 @@ allow microdroid_manager serial_device:chr_file w_file_perms;
# Allow microdroid_manager to handle extra_apks
allow microdroid_manager extra_apk_file:dir create_dir_perms;
# Allow microdroid_manager to write kmsg_debug (stdio_to_kmsg).
allow microdroid_manager kmsg_debug_device:chr_file w_file_perms;
# Domains other than microdroid can't write extra_apks
neverallow { domain -microdroid_manager -init -vendor_init } extra_apk_file:file no_w_file_perms;
neverallow { domain -microdroid_manager -init -vendor_init } extra_apk_file:dir no_w_dir_perms;