Skip to content
Snippets Groups Projects
Commit 117d69fd authored by Treehugger Robot's avatar Treehugger Robot Committed by Gerrit Code Review
Browse files

Merge "domain.te & kernel.te: allow kernel to write nativetest_data_file"

parents 2d01df0a 64ff9e95
Branches
No related tags found
No related merge requests found
Show whitespace changes
Inline Side-by-side
public/domain.te
+ 1
− 1
View file @ 117d69fd
...@@ -466,7 +466,7 @@ neverallow { ...@@ -466,7 +466,7 @@ neverallow {
}:file no_x_file_perms; }:file no_x_file_perms;
# The test files and executables MUST not be accessible to any domain # The test files and executables MUST not be accessible to any domain
neverallow domain nativetest_data_file:file_class_set no_w_file_perms; neverallow { domain userdebug_or_eng(`-kernel') } nativetest_data_file:file_class_set no_w_file_perms;
neverallow domain nativetest_data_file:dir no_w_dir_perms; neverallow domain nativetest_data_file:dir no_w_dir_perms;
neverallow { domain userdebug_or_eng(`-shell') } nativetest_data_file:file no_x_file_perms; neverallow { domain userdebug_or_eng(`-shell') } nativetest_data_file:file no_x_file_perms;
......
public/kernel.te
+ 1
− 1
View file @ 117d69fd
...@@ -69,7 +69,7 @@ allow kernel asec_image_file:file read; ...@@ -69,7 +69,7 @@ allow kernel asec_image_file:file read;
# and for LTP kernel tests (b/73220071) # and for LTP kernel tests (b/73220071)
userdebug_or_eng(` userdebug_or_eng(`
allow kernel update_engine_data_file:file read; allow kernel update_engine_data_file:file read;
allow kernel nativetest_data_file:file read; allow kernel nativetest_data_file:file { read write };
') ')
# Access to /data/media. # Access to /data/media.
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment