tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Avoid audit when running adb shell -t run-as xxx. am: 3b7d9e49df

Browse source 
am: 6e46ccdf57

Change-Id: I5241333ec9099c7db3154cfcdb41003c65e235a0
This commit is contained in:
Yabin Cui 2017-06-20 19:59:55 +00:00 committed by android-build-merger
commit ed88246c57
2 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
private/domain_deprecated.te
View file

@ -25,7 +25,7 @@ auditallow { domain_deprecated -appdomain -netd -surfaceflinger } system_server:
# This is used for e.g. adb backup/restore.
allow domain_deprecated adbd:fd use;
userdebug_or_eng(`
auditallow { domain_deprecated -appdomain -system_server } adbd:fd use;
auditallow { domain_deprecated -appdomain -system_server -runas } adbd:fd use;
')
# Root fs.

1
public/runas.te
View file

@ -1,6 +1,7 @@
type runas, domain, mlstrustedsubject;
type runas_exec, exec_type, file_type;
allow runas adbd:fd use;
allow runas adbd:process sigchld;
allow runas adbd:unix_stream_socket { read write };
allow runas shell:fd use;