tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge "Allow microdroid_manager to read /proc/bootconfig"

Browse source
This commit is contained in:
Treehugger Robot 2021-12-07 11:06:07 +00:00 committed by Gerrit Code Review
commit f05ad45789
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
microdroid/system/private/microdroid_manager.te
View file

@ -73,4 +73,8 @@ get_prop(microdroid_manager, bootloader_prop)
# Allow microdroid_manager to shutdown the device when verification fails
set_prop(microdroid_manager, powerctl_prop)
# Allow microdroid_manager to read bootconfig so that it can reject a bootconfig
# that is different from what is recorded in the instance.img file.
allow microdroid_manager proc_bootconfig:file r_file_perms;
neverallow microdroid_manager { file_type fs_type }:file execute_no_trans;