tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Make the DICE HAL a bootstrap process

Browse source 
This HAL starts before APEXs are activated so needs access to the
bootstrap bionic libraries.

Bug: 214231981
Test: run microdroid
Change-Id: If82729eb2eff812916f257d24ce206e371be0c56
This commit is contained in:
Andrew Scull 2022-01-21 18:19:21 +00:00
parent f252d81ec9
commit f94a381585
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
microdroid/vendor/hal_dice_default.te vendored
View file

@ -3,3 +3,7 @@ hal_server_domain(hal_dice_default, hal_dice)
type hal_dice_default_exec, exec_type, vendor_file_type, file_type;
init_daemon_domain(hal_dice_default)
# hal_dice_default is using bootstrap bionic
allow hal_dice_default system_bootstrap_lib_file:dir r_dir_perms;
allow hal_dice_default system_bootstrap_lib_file:file { execute read open getattr map };