Skip to content
Snippets Groups Projects
Commit e777112e authored by Jeff Vander Stoep's avatar Jeff Vander Stoep Committed by android-build-merger
Browse files

Merge "runas: Grant access to seapp_contexts_file" into oc-dev 

am: f4739f40

Change-Id: Ie07e3ababe6836f6b5c2522c3a3255367d01b662
parents ff61a10c f4739f40
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 4 additions and 0 deletions
public/runas.te
+ 4
− 0
View file @ e777112e
...@@ -23,6 +23,10 @@ selinux_check_context(runas) # validate context ...@@ -23,6 +23,10 @@ selinux_check_context(runas) # validate context
allow runas self:process setcurrent; allow runas self:process setcurrent;
allow runas non_system_app_set:process dyntransition; # setcon allow runas non_system_app_set:process dyntransition; # setcon
# runas/libselinux needs access to seapp_contexts_file to
# determine which domain to transition to.
allow runas seapp_contexts_file:file r_file_perms;
### ###
### neverallow rules ### neverallow rules
### ###
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment