tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allow app_zygote to map memfd backed memeory as PROT_EXEC"

Browse source
This commit is contained in:
Dimitry Ivanov 2023-06-15 08:44:16 +00:00 committed by Gerrit Code Review
commit c01d3fb36c
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
private/app_zygote.te
View file

@ -20,6 +20,9 @@ allow app_zygote isolated_app:process dyntransition;
# For JIT
allow app_zygote self:process execmem;
# Allow exec mapping from tmpfs (memfds) for binary translation
allow app_zygote app_zygote_tmpfs:file execute;
# Allow app_zygote to stat the files that it opens. It must
# be able to inspect them so that it can reopen them on fork
# if necessary: b/30963384.