tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Allow ueventd to access device-mapper. am: ae8817dc1e am: 53a4da9231

Browse source 
Original change: https://googleplex-android-review.googlesource.com/c/platform/system/sepolicy/+/23598602

Change-Id: Iac23c82d77207bb5d53c5f760556f9d0817f4015
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
David Anderson 2023-06-08 16:58:28 +00:00 committed by Automerger Merge Worker
commit 9460f955d6
3 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
microdroid/system/private/ueventd.te
View file

@ -46,6 +46,10 @@ allow ueventd self:global_capability_class_set sys_module;
allow ueventd vendor_file:system module_load;
allow ueventd kernel:key search;
# Query device-mapper to extract name/uuid in response to uevents.
allow ueventd dm_device:chr_file rw_file_perms;
allow ueventd self:capability sys_admin;
# ueventd is using bootstrap bionic
use_bootstrap_libs(ueventd)

4
prebuilts/api/34.0/public/ueventd.te
View file

@ -65,6 +65,10 @@ use_bootstrap_libs(ueventd)
# Allow ueventd to run shell scripts from vendor
allow ueventd vendor_shell_exec:file execute;
# Query device-mapper to extract name/uuid in response to uevents.
allow ueventd dm_device:chr_file rw_file_perms;
allow ueventd self:capability sys_admin;
#####
##### neverallow rules
#####

4
public/ueventd.te
View file

@ -65,6 +65,10 @@ use_bootstrap_libs(ueventd)
# Allow ueventd to run shell scripts from vendor
allow ueventd vendor_shell_exec:file execute;
# Query device-mapper to extract name/uuid in response to uevents.
allow ueventd dm_device:chr_file rw_file_perms;
allow ueventd self:capability sys_admin;
#####
##### neverallow rules
#####