Skip to content
Snippets Groups Projects
Commit c6140466 authored by Jeff Vander Stoep's avatar Jeff Vander Stoep Committed by android-build-merger
Browse files

Move some perms back to domain 

am: aef68b77

* commit 'aef68b77':
  Move some perms back to domain
parents 0062aa1b aef68b77
Branches
Tags
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 2 additions and 0 deletions
domain.te
+ 2
− 0
View file @ c6140466
...@@ -22,6 +22,7 @@ allow domain self:process { ...@@ -22,6 +22,7 @@ allow domain self:process {
setrlimit setrlimit
}; };
allow domain self:fd use; allow domain self:fd use;
allow domain proc:dir search;
allow domain self:dir r_dir_perms; allow domain self:dir r_dir_perms;
allow domain self:lnk_file r_file_perms; allow domain self:lnk_file r_file_perms;
allow domain self:{ fifo_file file } rw_file_perms; allow domain self:{ fifo_file file } rw_file_perms;
...@@ -96,6 +97,7 @@ allow domain proc:lnk_file read; ...@@ -96,6 +97,7 @@ allow domain proc:lnk_file read;
# toybox loads libselinux which stats /sys/fs/selinux/ # toybox loads libselinux which stats /sys/fs/selinux/
allow domain selinuxfs:file getattr; allow domain selinuxfs:file getattr;
allow domain sysfs:dir search; allow domain sysfs:dir search;
allow domain selinuxfs:filesystem getattr;
### ###
### neverallow rules ### neverallow rules
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment