Skip to content
Snippets Groups Projects
Commit f4739f40 authored by TreeHugger Robot's avatar TreeHugger Robot Committed by Android (Google) Code Review
Browse files

Merge "runas: Grant access to seapp_contexts_file" into oc-dev

parents b5081ea0 7d6185fe
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 4 additions and 0 deletions
public/runas.te
+ 4
− 0
View file @ f4739f40
...@@ -23,6 +23,10 @@ selinux_check_context(runas) # validate context ...@@ -23,6 +23,10 @@ selinux_check_context(runas) # validate context
allow runas self:process setcurrent; allow runas self:process setcurrent;
allow runas non_system_app_set:process dyntransition; # setcon allow runas non_system_app_set:process dyntransition; # setcon
# runas/libselinux needs access to seapp_contexts_file to
# determine which domain to transition to.
allow runas seapp_contexts_file:file r_file_perms;
### ###
### neverallow rules ### neverallow rules
### ###
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment