Skip to content
Snippets Groups Projects
Commit aeb1f6dc authored by Tri Vo's avatar Tri Vo
Browse files

Add support for RS vendor executables.

/vendor/bin/bcc being a dependency of renderscript should be labeled as
same_process_hal_file. To facilitate that we relax neverallow rules for
executing same_process_hal_file from coredomain.

See details on /vendor/bin/bcc:
https://source.android.com/devices/architecture/vndk/renderscript

Bug: 112561868
Test: build-time change
Change-Id: Ie996fb863090bf08b3d3ef653da827d0b22937d7
Merged-In: Ie996fb863090bf08b3d3ef653da827d0b22937d7
(cherry picked from commit dd253e90)
parent a545a4c7
No related branches found
No related tags found
No related merge requests found
......@@ -1033,7 +1033,10 @@ full_treble_only(`
coredomain
-shell
-system_executes_vendor_violators
} vendor_file_type:file execute_no_trans;
} {
vendor_file_type
-same_process_hal_file
}:file execute_no_trans;
')
# Only authorized processes should be writing to files in /data/dalvik-cache
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment