resolved conflicts for merge of 77ec892b
to jb-mr2-dev-plus-aosp
Change-Id: Ia9f34580a35d3f5ff7ea0ac9a3784d2650e61b6a
This commit is contained in:
commit
e5e98aef40
5 changed files with 16 additions and 0 deletions
|
@ -49,6 +49,7 @@ type uhid_device, dev_type;
|
|||
type tun_device, dev_type, mlstrustedobject;
|
||||
type usbaccessory_device, dev_type;
|
||||
type usb_device, dev_type;
|
||||
type klog_device, dev_type;
|
||||
type properties_device, dev_type;
|
||||
|
||||
# All devices have a uart for the hci
|
||||
|
|
|
@ -114,6 +114,7 @@
|
|||
/dev/watchdog u:object_r:watchdog_device:s0
|
||||
/dev/xt_qtaguid u:object_r:qtaguid_device:s0
|
||||
/dev/zero u:object_r:zero_device:s0
|
||||
/dev/__kmsg__ u:object_r:klog_device:s0
|
||||
/dev/__properties__ u:object_r:properties_device:s0
|
||||
#############################
|
||||
# System files
|
||||
|
|
11
te_macros
11
te_macros
|
@ -285,6 +285,17 @@ define(`access_kmsg', `
|
|||
allow $1 kernel:system syslog_read;
|
||||
')
|
||||
|
||||
#####################################
|
||||
# write_klog(domain)
|
||||
# Ability to write to kernel log via
|
||||
# klog_write()
|
||||
# See system/core/libcutil/klog.c
|
||||
define(`write_klog', `
|
||||
type_transition $1 device:chr_file klog_device "__kmsg__";
|
||||
allow $1 klog_device:chr_file { create open write unlink };
|
||||
allow $1 device:dir { add_name remove_name };
|
||||
')
|
||||
|
||||
#####################################
|
||||
# Non system_app application set
|
||||
#
|
||||
|
|
|
@ -2,6 +2,7 @@
|
|||
# it lives in the rootfs and has no unique file type.
|
||||
type ueventd, domain;
|
||||
tmpfs_domain(ueventd)
|
||||
write_klog(ueventd)
|
||||
security_access_policy(ueventd)
|
||||
allow ueventd rootfs:file entrypoint;
|
||||
allow ueventd init:process sigchld;
|
||||
|
|
2
vold.te
2
vold.te
|
@ -32,6 +32,8 @@ allow vold self:capability { sys_boot };
|
|||
# XXX Label sysfs files with a specific type?
|
||||
allow vold sysfs:file rw_file_perms;
|
||||
|
||||
write_klog(vold)
|
||||
|
||||
#
|
||||
# Rules to support encrypted fs support.
|
||||
#
|
||||
|
|
Loading…
Reference in a new issue