Skip to content
Snippets Groups Projects
Commit 26c31dee authored by TreeHugger Robot's avatar TreeHugger Robot Committed by Android (Google) Code Review
Browse files

Merge "Sepolicy: Allow system server to exec zygote_exec"

parents 2bbc9c9f 7db95725
No related branches found
No related tags found
No related merge requests found
Show whitespace changes
Inline Side-by-side
private/system_server.te
+ 2
− 1
View file @ 26c31dee
...@@ -661,11 +661,12 @@ allow system_server sysfs_leds:dir r_dir_perms; ...@@ -661,11 +661,12 @@ allow system_server sysfs_leds:dir r_dir_perms;
allow system_server debugfs_tracing_instances:dir search; allow system_server debugfs_tracing_instances:dir search;
allow system_server debugfs_wifi_tracing:file rw_file_perms; allow system_server debugfs_wifi_tracing:file rw_file_perms;
# allow system_server to exec shell on ASAN builds. Needed to run # allow system_server to exec shell, asanwrapper & zygote(app_process) on ASAN builds. Needed to run
# asanwrapper. # asanwrapper.
with_asan(` with_asan(`
allow system_server shell_exec:file rx_file_perms; allow system_server shell_exec:file rx_file_perms;
allow system_server asanwrapper_exec:file rx_file_perms; allow system_server asanwrapper_exec:file rx_file_perms;
allow system_server zygote_exec:file rx_file_perms;
') ')
### ###
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment