tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "remove unnecessary right from virtualizationservice"

Browse source
This commit is contained in:
Jooyung Han 2021-11-02 09:10:25 +00:00 committed by Gerrit Code Review
commit effe33f20d
1 changed files with 0 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
private/virtualizationservice.te
View file

@ -22,9 +22,6 @@ add_service(virtualizationservice, virtualization_service)
# When virtualizationservice execs a file with the crosvm_exec label, run it in the crosvm domain.
domain_auto_trans(virtualizationservice, crosvm_exec, crosvm)
# Let virtualizationservice exec other files (e.g. mk_cdisk) in the same domain.
allow virtualizationservice system_file:file execute_no_trans;
# Let virtualizationservice kill crosvm.
allow virtualizationservice crosvm:process sigkill;