platform_system_sepolicy/public/credstore.te
Marco Ballesio aa4ce95c6f sepolicy: rules for uid/pid cgroups v2 hierarchy
Bug: 168907513
Test: verified the correct working of the v2 uid/pid hierarchy in normal
and recovery modes

This reverts commit aa8bb3a29b.

Change-Id: Ib344d500ea49b86e862e223ab58a16601eebef47
2021-02-11 23:40:38 +00:00

17 lines
545 B
Text

type credstore, domain;
type credstore_exec, system_file_type, exec_type, file_type;
# credstore daemon
binder_use(credstore)
binder_service(credstore)
binder_call(credstore, system_server)
allow credstore credstore_data_file:dir create_dir_perms;
allow credstore credstore_data_file:file create_file_perms;
add_service(credstore, credstore_service)
allow credstore sec_key_att_app_id_provider_service:service_manager find;
allow credstore dropbox_service:service_manager find;
r_dir_file(credstore, cgroup)
r_dir_file(credstore, cgroup_v2)