tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

runas: grant access to seapp_contexts files

Browse source 
To be replaced by commit 1e149967a
seapp_context: explicitly label all seapp context files

Test: build policy
Change-Id: I8d30bd1d50b9e4a55f878c25d134907d4458cf59
Merged-In: I0f0e937e56721d458e250d48ce62f80e3694900f
This commit is contained in:
Jeff Vander Stoep 2017-07-19 12:54:59 -07:00
parent 9f8773b458
commit dcec3ee905
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
public/runas.te
View file

@ -25,6 +25,10 @@ selinux_check_context(runas) # validate context
allow runas self:process setcurrent;
allow runas non_system_app_set:process dyntransition; # setcon
# Grant access to seapp_contexts files
# To be replaced by seapp_contexts_file label from commit 1e149967a
allow runas rootfs:file r_file_perms;
###
### neverallow rules
###