tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allow gmscore to ptrace itself"

Browse source
This commit is contained in:
Treehugger Robot 2019-12-12 15:40:37 +00:00 committed by Gerrit Code Review
commit a5328d2614
2 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
private/gmscore_app.te
View file

@ -67,6 +67,9 @@ dontaudit gmscore_app { wifi_prop exported_wifi_prop }:file r_file_perms;
# Access the network
net_domain(gmscore_app)
# webview crash handling depends on self ptrace (b/27697529, b/20150694, b/19277529#comment7)
allow gmscore_app self:process ptrace;
# Allow loading executable code from writable priv-app home
# directories. This is a W^X violation, however, it needs
# to be supported for now for the following reasons.

4
private/priv_app.te
View file

@ -16,6 +16,10 @@ create_pty(priv_app)
# webview crash handling depends on self ptrace (b/27697529, b/20150694, b/19277529#comment7)
allow priv_app self:process ptrace;
# b/142672293: No other priv-app should need this allow rule now that GMS core runs in its own domain.
userdebug_or_eng(`
auditallow priv_app self:process ptrace;
')
# Allow loading executable code from writable priv-app home
# directories. This is a W^X violation, however, it needs