Skip to content
Snippets Groups Projects
Commit 00da0661 authored by Jeff Vander Stoep's avatar Jeff Vander Stoep Committed by android-build-merger
Browse files

Merge "runas: Grant access to seapp_contexts_file" into oc-dev am: f4739f40 

am: e777112e

Change-Id: I893aff73fa2beb83bee0e17aec849ac49d03c639
parents 770e6b7c e777112e
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 4 additions and 0 deletions
public/runas.te
+ 4
− 0
View file @ 00da0661
...@@ -23,6 +23,10 @@ selinux_check_context(runas) # validate context ...@@ -23,6 +23,10 @@ selinux_check_context(runas) # validate context
allow runas self:process setcurrent; allow runas self:process setcurrent;
allow runas non_system_app_set:process dyntransition; # setcon allow runas non_system_app_set:process dyntransition; # setcon
# runas/libselinux needs access to seapp_contexts_file to
# determine which domain to transition to.
allow runas seapp_contexts_file:file r_file_perms;
### ###
### neverallow rules ### neverallow rules
### ###
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment