tequilaOS/platform_system_sepolicy
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

procrank: fix procrank when run from dumpstate

Browse source 
Commit a191398812 added a new
SELinux label to /system/xbin/procrank, which had the effect of
preventing dumpstate from executing procrank. Allow dumpstate
to execute procrank.

Bug: 18342188
Change-Id: If5b781db0d3af34912f3c803b7fa73d53120f3ba
This commit is contained in:
Nick Kralevich 2015-03-19 11:18:03 -07:00
parent eac1011eaf
commit fa281f5d78
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
procrank.te
View file

@ -5,9 +5,11 @@ userdebug_or_eng(`
type procrank, domain, mlstrustedsubject; type procrank, domain, mlstrustedsubject;
domain_auto_trans(shell, procrank_exec, procrank) domain_auto_trans(shell, procrank_exec, procrank)
domain_auto_trans(dumpstate, procrank_exec, procrank)
allow procrank self:capability sys_ptrace; allow procrank self:capability sys_ptrace;
allow procrank devpts:chr_file { read write getattr ioctl }; allow procrank devpts:chr_file { read write getattr ioctl };
allow procrank dumpstate:unix_stream_socket { read write getattr };
r_dir_file(procrank, domain) r_dir_file(procrank, domain)
allow procrank shell:fd use; allow procrank { shell dumpstate }:fd use;
allow procrank adbd:process sigchld; allow procrank adbd:process sigchld;
') ')