diff --git a/app.te b/app.te index f53f633c43df93b1881457c7887d72732753d81e..80c40aac8a1c02070ab1b300ce095aaf553608fb 100644 --- a/app.te +++ b/app.te @@ -7,6 +7,9 @@ ### zygote spawned apps should be added here. ### +# Dalvik Compiler JIT Mapping. +allow appdomain self:process execmem; + # Allow apps to connect to the keystore unix_socket_connect(appdomain, keystore, keystore) diff --git a/domain.te b/domain.te index d0e3ff43afaf034e55b2282507c795e8c50a4b9a..826a67fc47e70c27e1f759c62c2cd9f06cbff8e9 100644 --- a/domain.te +++ b/domain.te @@ -11,7 +11,7 @@ allow domain tmpfs:file { read getattr }; allow domain tmpfs:dir r_dir_perms; # Intra-domain accesses. -allow domain self:process ~{ execstack execheap ptrace }; +allow domain self:process ~{ execmem execstack execheap ptrace }; allow domain self:fd use; allow domain self:dir r_dir_perms; allow domain self:lnk_file r_file_perms;