tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Fix denials encountered while getting bugreports.

Browse source 
Bug: 10498304
Change-Id: I312665a2cd09fa16ae3f3978aebdb0da99cf1f74
This commit is contained in:
Geremy Condra 2013-08-30 13:02:30 -07:00
parent 765e95f99f
commit 81560733a4
3 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
app.te
View file

@ -76,8 +76,8 @@ allow appdomain isolated_app:unix_stream_socket { read write };
# Backup ability for every app. BMS opens and passes the fd
# to any app that has backup ability. Hence, no open permissions here.
allow appdomain backup_data_file:file { read write };
allow appdomain cache_backup_file:file { read write };
allow appdomain backup_data_file:file { read write getattr };
allow appdomain cache_backup_file:file { read write getattr };
# Backup ability using 'adb backup'
allow appdomain system_data_file:lnk_file getattr;

2
domain.te
View file

@ -81,7 +81,7 @@ allow domain system_data_file:file { getattr read };
allow domain system_data_file:lnk_file read;
# Read apk files under /data/app.
allow domain apk_data_file:dir search;
allow domain apk_data_file:dir { getattr search };
allow domain apk_data_file:file r_file_perms;
# Read /data/dalvik-cache.

2
zygote.te
View file

@ -12,7 +12,7 @@ allow zygote self:capability setpcap;
allow zygote system:process dyntransition;
allow zygote appdomain:process dyntransition;
# Allow zygote to read app data dirs (b/10455872)
allow zygote appdomain:dir search;
allow zygote appdomain:dir { getattr search };
allow zygote appdomain:file { r_file_perms };
# Move children into the peer process group.
allow zygote system:process { getpgid setpgid };