Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
A
AndroidSystemSEPolicy
Manage
Activity
Members
Code
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Deploy
Releases
Container Registry
Model registry
Analyze
Contributor analytics
Repository analytics
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Terms and privacy
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
Werner Sembach
AndroidSystemSEPolicy
Commits
47c396d6
Commit
47c396d6
authored
7 years ago
by
Jiyong Park
Committed by
android-build-merger
7 years ago
Browse files
Options
Downloads
Plain Diff
Rename vndk-stable to vndk-sp (SP=Same-process) am:
ba23c8fa
am:
c1de2f31
Change-Id: I7febe6164813451ad38449642450e4bfee31480c
parents
60540ad8
c1de2f31
No related branches found
Branches containing commit
No related tags found
Tags containing commit
No related merge requests found
Changes
3
Hide whitespace changes
Inline
Side-by-side
Showing
3 changed files
private/file_contexts
+1
-1
1 addition, 1 deletion
private/file_contexts
public/domain.te
+5
-5
5 additions, 5 deletions
public/domain.te
public/file.te
+2
-2
2 additions, 2 deletions
public/file.te
with
8 additions
and
8 deletions
private/file_contexts
+
1
−
1
View file @
47c396d6
...
...
@@ -266,7 +266,7 @@
/(vendor|system/vendor)/lib(64)?/egl(/.*)? u:object_r:same_process_hal_file:s0
/(vendor|system/vendor)/lib(64)?/vndk-s
table
(/.*)? u:object_r:vndk_s
table
_file:s0
/(vendor|system/vendor)/lib(64)?/vndk-s
p
(/.*)? u:object_r:vndk_s
p
_file:s0
# TODO: b/36790901 move this to /vendor/etc
/(vendor|system/vendor)/manifest.xml u:object_r:vendor_configs_file:s0
...
...
This diff is collapsed.
Click to expand it.
public/domain.te
+
5
−
5
View file @
47c396d6
...
...
@@ -119,10 +119,10 @@ allow domain vendor_hal_file:dir r_dir_perms;
allow domain same_process_hal_file:dir r_dir_perms;
allow domain same_process_hal_file:file { execute read open getattr };
# Any process can load vndk-s
table
libraries, which are system libraries
# Any process can load vndk-s
p
libraries, which are system libraries
# used by same process HALs
allow domain vndk_s
table
_file:dir r_dir_perms;
allow domain vndk_s
table
_file:file { execute read open getattr };
allow domain vndk_s
p
_file:dir r_dir_perms;
allow domain vndk_s
p
_file:file { execute read open getattr };
# All domains get access to /vendor/etc
allow domain vendor_configs_file:dir r_dir_perms;
...
...
@@ -546,7 +546,7 @@ full_treble_only(`
-coredata_in_vendor_violators
}
core_data_file_type
-zoneinfo_data_file #
VNDK s
table API provided by libc
-zoneinfo_data_file #
S
table API provided by libc
:{
file_class_set
} ~{ append getattr ioctl read write };
...
...
@@ -561,7 +561,7 @@ full_treble_only(`
} {
core_data_file_type
-system_data_file
-zoneinfo_data_file #
VNDK s
table API provided by libc
-zoneinfo_data_file #
S
table API provided by libc
}:dir *;
neverallow {
domain
...
...
This diff is collapsed.
Click to expand it.
public/file.te
+
2
−
2
View file @
47c396d6
...
...
@@ -94,8 +94,8 @@ type vendor_configs_file, vendor_file_type, file_type;
# Default type for all *same process* HALs.
# e.g. libEGL_xxx.so, android.hardware.graphics.mapper@2.0-impl.so
type same_process_hal_file, vendor_file_type, file_type;
# Default type for vndk-s
table
libs. /vendor/lib/vndk-s
table
type vndk_s
table
_file, vendor_file_type, file_type;
# Default type for vndk-s
p
libs. /vendor/lib/vndk-s
p
type vndk_s
p
_file, vendor_file_type, file_type;
# Default type for everything in /vendor/framework
type vendor_framework_file, vendor_file_type, file_type;
# Default type for everything in /vendor/overlay
...
...
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment