Merge "runas: Grant access to seapp_contexts_file" into oc-dev

This commit is contained in:
TreeHugger Robot 2017-03-30 22:47:02 +00:00 committed by Android (Google) Code Review
commit f4739f4029

View file

@ -23,6 +23,10 @@ selinux_check_context(runas) # validate context
allow runas self:process setcurrent;
allow runas non_system_app_set:process dyntransition; # setcon
# runas/libselinux needs access to seapp_contexts_file to
# determine which domain to transition to.
allow runas seapp_contexts_file:file r_file_perms;
###
### neverallow rules
###