From dda5590883745ab01840bd8ab17d0ef58406b55b Mon Sep 17 00:00:00 2001 From: Evgenii Stepanov <eugenis@google.com> Date: Wed, 16 Mar 2016 13:51:31 -0700 Subject: [PATCH] Add /data/lib64, /data/vendor/lib64 to ASan sepolicy. This policy takes effect only when building with SANITIZE_TARGET=address and allows the Zygote to load libraries from /data. That's where ASan-instrumented copies of system libraries are located. 32-bit library directories have been added a while back; this CL extends the same policy to 64-bit directories. Bug: 25751174 Change-Id: Ieb4701b78db9649ec8563f2962a69db537ae61b3 --- file_contexts_asan | 2 ++ 1 file changed, 2 insertions(+) diff --git a/file_contexts_asan b/file_contexts_asan index 5ffd7e2b5..5813d3264 100644 --- a/file_contexts_asan +++ b/file_contexts_asan @@ -1,2 +1,4 @@ /data/lib(/.*)? u:object_r:system_file:s0 +/data/lib64(/.*)? u:object_r:system_file:s0 /data/vendor/lib(/.*)? u:object_r:system_file:s0 +/data/vendor/lib64(/.*)? u:object_r:system_file:s0 -- GitLab