Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
A
AndroidSystemSEPolicy
Manage
Activity
Members
Code
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Deploy
Releases
Container registry
Model registry
Analyze
Contributor analytics
Repository analytics
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Terms and privacy
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
Werner Sembach
AndroidSystemSEPolicy
Commits
3fa9b4dd
Commit
3fa9b4dd
authored
11 years ago
by
Nick Kralevich
Committed by
Gerrit Code Review
11 years ago
Browse files
Options
Downloads
Plain Diff
Merge "Allow reading of radio data files passed over binder."
parents
6bf9bbc8
3fbc536d
No related branches found
No related tags found
No related merge requests found
Changes
3
Hide whitespace changes
Inline
Side-by-side
Showing
3 changed files
app.te
+3
-0
3 additions, 0 deletions
app.te
drmserver.te
+3
-0
3 additions, 0 deletions
drmserver.te
mediaserver.te
+3
-0
3 additions, 0 deletions
mediaserver.te
with
9 additions
and
0 deletions
app.te
+
3
−
0
View file @
3fa9b4dd
...
@@ -101,6 +101,9 @@ allow appdomain system_data_file:lnk_file getattr;
...
@@ -101,6 +101,9 @@ allow appdomain system_data_file:lnk_file getattr;
# Allow read/stat of /data/media files passed by Binder or local socket IPC.
# Allow read/stat of /data/media files passed by Binder or local socket IPC.
allow appdomain media_rw_data_file:file { read getattr };
allow appdomain media_rw_data_file:file { read getattr };
# Read /data/data/com.android.providers.telephony files passed over Binder.
allow appdomain radio_data_file:file { read getattr };
# Access SDcard.
# Access SDcard.
allow appdomain sdcard_type:dir create_dir_perms;
allow appdomain sdcard_type:dir create_dir_perms;
allow appdomain sdcard_type:file create_file_perms;
allow appdomain sdcard_type:file create_file_perms;
...
...
This diff is collapsed.
Click to expand it.
drmserver.te
+
3
−
0
View file @
3fa9b4dd
...
@@ -41,3 +41,6 @@ r_dir_file(drmserver, media_rw_data_file)
...
@@ -41,3 +41,6 @@ r_dir_file(drmserver, media_rw_data_file)
# Read resources from open apk files passed over Binder.
# Read resources from open apk files passed over Binder.
allow drmserver apk_data_file:file { read getattr };
allow drmserver apk_data_file:file { read getattr };
allow drmserver asec_apk_file:file { read getattr };
allow drmserver asec_apk_file:file { read getattr };
# Read /data/data/com.android.providers.telephony files passed over Binder.
allow drmserver radio_data_file:file { read getattr };
This diff is collapsed.
Click to expand it.
mediaserver.te
+
3
−
0
View file @
3fa9b4dd
...
@@ -40,6 +40,9 @@ allow mediaserver sysfs:file rw_file_perms;
...
@@ -40,6 +40,9 @@ allow mediaserver sysfs:file rw_file_perms;
allow mediaserver apk_data_file:file { read getattr };
allow mediaserver apk_data_file:file { read getattr };
allow mediaserver asec_apk_file:file { read getattr };
allow mediaserver asec_apk_file:file { read getattr };
# Read /data/data/com.android.providers.telephony files passed over Binder.
allow mediaserver radio_data_file:file { read getattr };
# Access camera device.
# Access camera device.
allow mediaserver camera_device:chr_file rw_file_perms;
allow mediaserver camera_device:chr_file rw_file_perms;
allow mediaserver rpmsg_device:chr_file rw_file_perms;
allow mediaserver rpmsg_device:chr_file rw_file_perms;
...
...
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment