Skip to content
Snippets Groups Projects
Commit 2afd3383 authored by Jeff Vander Stoep's avatar Jeff Vander Stoep Committed by android-build-merger
Browse files

Merge "adbd/shell: grant access to sepolicy for cts" into oc-dev 

am: bab5872c

Change-Id: I0341e66bd3a8fcbddf9daf7da84187430b5747d6
parents 2ec492f1 bab5872c
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
private/adbd.te
+ 2
− 0
View file @ 2afd3383
...@@ -103,6 +103,8 @@ allow adbd kernel:security read_policy; ...@@ -103,6 +103,8 @@ allow adbd kernel:security read_policy;
allow adbd service_contexts_file:file r_file_perms; allow adbd service_contexts_file:file r_file_perms;
allow adbd file_contexts_file:file r_file_perms; allow adbd file_contexts_file:file r_file_perms;
allow adbd seapp_contexts_file:file r_file_perms; allow adbd seapp_contexts_file:file r_file_perms;
allow adbd property_contexts_file:file r_file_perms;
allow adbd sepolicy_file:file r_file_perms;
allow adbd surfaceflinger_service:service_manager find; allow adbd surfaceflinger_service:service_manager find;
allow adbd bootchart_data_file:dir search; allow adbd bootchart_data_file:dir search;
......
public/shell.te
+ 7
− 0
View file @ 2afd3383
...@@ -147,6 +147,13 @@ allow shell proc:lnk_file getattr; ...@@ -147,6 +147,13 @@ allow shell proc:lnk_file getattr;
# #
allow shell dev_type:blk_file getattr; allow shell dev_type:blk_file getattr;
# read selinux policy files
allow shell file_contexts_file:file r_file_perms;
allow shell property_contexts_file:file r_file_perms;
allow shell seapp_contexts_file:file r_file_perms;
allow shell service_contexts_file:file r_file_perms;
allow shell sepolicy_file:file r_file_perms;
### ###
### Neverallow rules ### Neverallow rules
### ###
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment