Skip to content
Snippets Groups Projects
Commit 16203678 authored by gcondra@google.com's avatar gcondra@google.com Committed by Android Git Automerger
Browse files

am 9504a507: Allow ADB to interact extensively with system_data_files.

* commit '9504a507':
  Allow ADB to interact extensively with system_data_files.
parents a69beee7 9504a507
No related branches found
No related tags found
No related merge requests found
...@@ -31,6 +31,10 @@ domain_auto_trans(adbd, shell_exec, shell) ...@@ -31,6 +31,10 @@ domain_auto_trans(adbd, shell_exec, shell)
# Do not sanitize the environment of the shell. # Do not sanitize the environment of the shell.
allow adbd shell:process noatsecure; allow adbd shell:process noatsecure;
# XXX Mostly to access system properties and keys- maybe those should be their own type?
allow adbd system_data_file:file create_file_perms;
allow adbd system_data_file:dir create_dir_perms;
# Perform binder IPC to surfaceflinger (screencap) # Perform binder IPC to surfaceflinger (screencap)
# XXX Run screencap in a separate domain? # XXX Run screencap in a separate domain?
binder_use(adbd) binder_use(adbd)
......
...@@ -140,6 +140,7 @@ allow system urandom_device:chr_file rw_file_perms; ...@@ -140,6 +140,7 @@ allow system urandom_device:chr_file rw_file_perms;
allow system usbaccessory_device:chr_file rw_file_perms; allow system usbaccessory_device:chr_file rw_file_perms;
allow system video_device:chr_file rw_file_perms; allow system video_device:chr_file rw_file_perms;
allow system qemu_device:chr_file rw_file_perms; allow system qemu_device:chr_file rw_file_perms;
allow system devpts:chr_file rw_file_perms;
# tun device used for 3rd party vpn apps # tun device used for 3rd party vpn apps
allow system tun_device:chr_file rw_file_perms; allow system tun_device:chr_file rw_file_perms;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment