tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

allow modprobe to read /proc/cmdline

Browse source 
This is needed for libmodprobe to pass module options on the kernel
commandline to kernel modules when they are loaded.

Bug: 155422904
Change-Id: I9df7e211765268815bfb9269365264f5ca468712
Merged-In: I9df7e211765268815bfb9269365264f5ca468712
This commit is contained in:
Steve Muckle 2020-05-04 08:58:46 -07:00
parent 594c68fd68
commit 9316da8e12
3 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
prebuilts/api/30.0/public/modprobe.te
View file

@ -1,6 +1,7 @@
type modprobe, domain; type modprobe, domain;
allow modprobe proc_modules:file r_file_perms; allow modprobe proc_modules:file r_file_perms;
allow modprobe proc_cmdline:file r_file_perms;
allow modprobe self:global_capability_class_set sys_module; allow modprobe self:global_capability_class_set sys_module;
allow modprobe kernel:key search; allow modprobe kernel:key search;
recovery_only(` recovery_only(`

1
public/modprobe.te
View file

@ -1,6 +1,7 @@
type modprobe, domain; type modprobe, domain;
allow modprobe proc_modules:file r_file_perms; allow modprobe proc_modules:file r_file_perms;
allow modprobe proc_cmdline:file r_file_perms;
allow modprobe self:global_capability_class_set sys_module; allow modprobe self:global_capability_class_set sys_module;
allow modprobe kernel:key search; allow modprobe kernel:key search;
recovery_only(` recovery_only(`

1
vendor/vendor_modprobe.te vendored
View file

@ -4,6 +4,7 @@ type vendor_modprobe, domain;
domain_trans(init, vendor_toolbox_exec, vendor_modprobe) domain_trans(init, vendor_toolbox_exec, vendor_modprobe)
allow vendor_modprobe proc_modules:file r_file_perms; allow vendor_modprobe proc_modules:file r_file_perms;
allow vendor_modprobe proc_cmdline:file r_file_perms;
allow vendor_modprobe self:global_capability_class_set sys_module; allow vendor_modprobe self:global_capability_class_set sys_module;
allow vendor_modprobe kernel:key search; allow vendor_modprobe kernel:key search;