From 6b558dcbea4b85b9cba1415a974e9941a22f7be7 Mon Sep 17 00:00:00 2001
From: Alex Klyubin <klyubin@google.com>
Date: Fri, 24 Mar 2017 09:30:19 -0700
Subject: [PATCH] su and perfprofd are coredomain too
This is a follow-up to f5446eb1486816c00136b2b5f0a3cc4a01706000 where
I forgot to associate su and perfprofd domains with coredomain.
Test: mmm system/sepolicy
sepolicy-analyze $OUT/root/sepolicy attribute coredomain
Bug: 35870313
Change-Id: I13f90693843f7c6fe9fea8e5332aa6dd9558478a
---
private/perfprofd.te | 1 +
private/su.te | 2 ++
2 files changed, 3 insertions(+)
diff --git a/private/perfprofd.te b/private/perfprofd.te
index 2b06cd975..9c249fd9a 100644
--- a/private/perfprofd.te
+++ b/private/perfprofd.te
@@ -1,3 +1,4 @@
userdebug_or_eng(`
+ typeattribute perfprofd coredomain;
init_daemon_domain(perfprofd)
')
diff --git a/private/su.te b/private/su.te
index 466bc0bb4..d42bf614c 100644
--- a/private/su.te
+++ b/private/su.te
@@ -1,4 +1,6 @@
userdebug_or_eng(`
+ typeattribute su coredomain;
+
domain_auto_trans(shell, su_exec, su)
# Allow dumpstate to call su on userdebug / eng builds to collect
# additional information.
--
GitLab