Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
A
AndroidSystemSEPolicy
Manage
Activity
Members
Code
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Deploy
Releases
Container registry
Model registry
Analyze
Contributor analytics
Repository analytics
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
GitLab community forum
Contribute to GitLab
Provide feedback
Terms and privacy
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
Werner Sembach
AndroidSystemSEPolicy
Commits
e5e98aef
Commit
e5e98aef
authored
12 years ago
by
Alex Klyubin
Browse files
Options
Downloads
Plain Diff
resolved conflicts for merge of
77ec892b
to jb-mr2-dev-plus-aosp
Change-Id: Ia9f34580a35d3f5ff7ea0ac9a3784d2650e61b6a
parents
8eb7d672
77ec892b
Branches
Branches containing commit
Tags
Tags containing commit
No related merge requests found
Changes
5
Show whitespace changes
Inline
Side-by-side
Showing
5 changed files
device.te
+1
-0
1 addition, 0 deletions
device.te
file_contexts
+1
-0
1 addition, 0 deletions
file_contexts
te_macros
+11
-0
11 additions, 0 deletions
te_macros
ueventd.te
+1
-0
1 addition, 0 deletions
ueventd.te
vold.te
+2
-0
2 additions, 0 deletions
vold.te
with
16 additions
and
0 deletions
device.te
+
1
−
0
View file @
e5e98aef
...
...
@@ -49,6 +49,7 @@ type uhid_device, dev_type;
type tun_device, dev_type, mlstrustedobject;
type usbaccessory_device, dev_type;
type usb_device, dev_type;
type klog_device, dev_type;
type properties_device, dev_type;
# All devices have a uart for the hci
...
...
This diff is collapsed.
Click to expand it.
file_contexts
+
1
−
0
View file @
e5e98aef
...
...
@@ -114,6 +114,7 @@
/dev/watchdog u:object_r:watchdog_device:s0
/dev/xt_qtaguid u:object_r:qtaguid_device:s0
/dev/zero u:object_r:zero_device:s0
/dev/__kmsg__ u:object_r:klog_device:s0
/dev/__properties__ u:object_r:properties_device:s0
#############################
# System files
...
...
This diff is collapsed.
Click to expand it.
te_macros
+
11
−
0
View file @
e5e98aef
...
...
@@ -285,6 +285,17 @@ define(`access_kmsg', `
allow $1 kernel:system syslog_read;
')
#####################################
# write_klog(domain)
# Ability to write to kernel log via
# klog_write()
# See system/core/libcutil/klog.c
define(`write_klog', `
type_transition $1 device:chr_file klog_device "__kmsg__";
allow $1 klog_device:chr_file { create open write unlink };
allow $1 device:dir { add_name remove_name };
')
#####################################
# Non system_app application set
#
...
...
This diff is collapsed.
Click to expand it.
ueventd.te
+
1
−
0
View file @
e5e98aef
...
...
@@ -2,6 +2,7 @@
# it lives in the rootfs and has no unique file type.
type ueventd, domain;
tmpfs_domain(ueventd)
write_klog(ueventd)
security_access_policy(ueventd)
allow ueventd rootfs:file entrypoint;
allow ueventd init:process sigchld;
...
...
This diff is collapsed.
Click to expand it.
vold.te
+
2
−
0
View file @
e5e98aef
...
...
@@ -32,6 +32,8 @@ allow vold self:capability { sys_boot };
# XXX Label sysfs files with a specific type?
allow vold sysfs:file rw_file_perms;
write_klog(vold)
#
# Rules to support encrypted fs support.
#
...
...
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment